WordPress CMS Commander Client 2.21 PHP Object Injection

WordPress CMS Command Client plugin version 2.21 suffer from a PHP object injection vulnerability.