Output validation vulnerability in Row Seats Core 2.68

The Row Seats Core plugin for WordPress is vulnerable to a security issue called PHP Object Injection in versions up to and including 2.66. This issue happens when attackers input untrusted data in certain parameters such as ‘mycartitems’. This could allow them to inject a malicious code into the plugin. It is possible that this code could be used to delete files, access sensitive data, or even run code on the target system, depending on what other plugins or themes are installed.