thumbnail ‘Gravity Forms’ WordPress Plugin Found Vulnerable to PHP Object Injection