| @@ -519,10 +519,9 @@ | ||
| 519 | 519 | $metadata = $entry->get_metadata(); |
| 520 | 520 | $payment = $entry->get_payment_data(); |
| 521 | 521 | |
| 522 | 522 | if ( isset( $payment->payment_data ) && is_serialized( $payment->payment_data ) ) { |
| 523 | - // Security fix: Prevent PHP Object Injection by restricting allowed classes | |
| 524 | - $payment->payment_data = @unserialize( $payment->payment_data, [ 'allowed_classes' => false ] ); | |
| 523 | + $payment->payment_data = unserialize( $payment->payment_data ); | |
| 525 | 524 | } |
| 526 | 525 | |
| 527 | 526 | if ( false === $fields ) { |
| 528 | 527 | wp_send_json_error( __( 'No form fields found!', 'weforms' ) ); |
