WordPress Finale Lite deserialization injection vulnerability

WordPress Finale Lite versions 2.21.0 and earlier contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection and could potentially be exploited by store administrators...