CVE-2016-4825 (e-commerce)
The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted serialized data.
Source: CVE-2016-4825 (e-commerce)