Add WordPress < 3.6.1 PHP Object Injection vulnerability disclosed by Tom Van Goethem