The authenticated users can cause a denial of service attacks, because this WordPress version does not properly store a profile containing a string representation of a serialized object.
Solution
Update WordPress.
Found a vulnerability that puts your sites at risk?
