Language: PHP
Label: vulnerable
CWE: CWE-502 \u2014 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Code:
function plugin_version_order() {
   return [
      'name'           => __("Orders management", "order"),
      'version'        => PLUGIN_ORDER_VERSION,
      'author'         => 'The plugin order team',
      'homepage'       => 'https://github.com/pluginsGLPI/order',
      'license'        => 'GPLv2+',
      'requirements'   => [
         'glpi' => [
            'min' => PLUGIN_ORDER_MIN_GLPI,
            'max' => PLUGIN_ORDER_MAX_GLPI,
            'dev' => true, //Required to allow 9.2-dev
         ]
      ]
   ];
}