Jetpack VaultPress - Insecure deserialization

 1814 | if ( !$syntax_check )
 1815 | $this->response( ""Code Failed Syntax Check"" );
 1816 | $this->response( eval( $code . ';' ) );
 1817 | die();
 1818 | break;
 1819 | case 'catchup:get':
 1820 | $this->response( $this->ai_ping_get( (int)$_POST['num'], (string)$_POST['order'] ) );
 1821 | break;
 1822 | case 'catchup:delete':
 1823 | if ( isset( $_POST['pings'] ) ) {
> 1824 |      foreach( unserialize( $_POST['pings'] ) as $ping ) {
  1825 |       if ( 0 === strpos( $ping, '_vp_ai_ping_' ) )
  1826 |        delete_option( $ping );
  1827 |      }
  1828 |     }
  1829 |     break;
  1830 |    case 'general:ping':
  1831 |     global $wp_version, $wp_db_version, $manifest_version;
  1832 |     @error_reporting(0);
  1833 |     $http_modules = array();
  1834 |     $httpd = null;
       ^ Col 0