CPE
A contributor PHP object injection vulnerability exists in the Dynamic QR Code - generator WordPress plugin, affecting versions 1.0.1 and earlier.