Kata Plus - Insecure deserialization

 254 | $cei_error = $file['error'];
 255 | return;
 256 | }
 257 | if ( ! file_exists( $file['file'] ) ) {
 258 | $cei_error = __( 'Error importing settings! Please try again.', 'kata-plus' );
 259 | return;
 260 | }
 261 |
 262 | // Get the upload data.
 263 | $raw = file_get_contents( $file['file'] );
> 264 |   $data = @unserialize( $raw );
  265 |
  266 |   // Remove the uploaded file.
  267 |   unlink( $file['file'] );
  268 |
  269 |   // Data checks.
  270 |   if ( 'array' != gettype( $data ) ) {
  271 |    $cei_error = __( 'Error importing settings! Please check that you uploaded a customizer export file.', 'kata-plus' );
  272 |    return;
  273 |   }
  274 |   if ( ! isset( $data['template'] ) || ! isset( $data['mods'] ) ) {
      ^ Col 0