ShiftCV WordPress Plugin PHP Object Injection Vulnerability

ShiftCV versions up to and including 3.0.14 are vulnerable to an unauthenticated PHP Object Injection flaw.

Because the vulnerability requires no authentication, a remote attacker may be able to exploit it against affected installations.