Input validation vulnerability in News Flash 1.1.0

The News Flash theme for WordPress has a security vulnerability that allows attackers to inject a harmful PHP Object. This can only be done by someone with Editor-level access or higher, and only if they have untrusted input from the “newsflash_post_meta” value. There is no known way for attackers to exploit this vulnerability, but if the target system has other plugins or themes installed, it could potentially allow them to do things like delete files, access sensitive information, or run code.