Vishwa

The vulnerability is on PHP Object Injection..


So.. looked around for a bit, and I’m not 100% sure, but this could be it.

File: 
accordions/classes/AccordionOptions.php

Code: 
$accordions = maybe_unserialize( get_option( $this->option_name ) );