Add WordPress < 3.6.1 PHP Object Injection disclosed by Tom Van Goethem