The patreon-connect plugin prior to 1.2.2 for WordPress has Object Injection.
patreon patreon wordpress