Product
The 10Web Social Photo Feed plugin versions 1.5.6 and earlier contain a contributor-level PHP object injection vulnerability.