CVE-2015-9474: The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.

high Affects simpolio (WordPress theme). Feed 2026.10.28.3, updated 2026-10-28; published 2019-10-10; advisory modified 2026-06-17.

The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.

Package: simpolio (WordPress theme) WordPress
Affected versions: =1.3.2
Fixed in: no fix recorded
Severity: high CVSS 8.8
Exploitation: not on CISA KEV · EPSS 1% (74.0th percentile)
Published: 2019-10-10
Source: nvd

References

CWE-276

NVD record simpolio (WordPress theme) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs How findings are ranked

Related advisories

CVE-2021-38557 high raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the same weakness: CWE-276
CVE-2011-4285 medium Moodle Incorrect Default Settings same weakness: CWE-276
CVE-2020-24402 medium Magento incorrect permissions vulnerability in the Integrations component same weakness: CWE-276
CVE-2020-9392 high An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPres same weakness: CWE-276
CVE-2015-9475 high The Pont theme 1.5 for WordPress has insufficient restrictions on option updates. same weakness: CWE-276
CVE-2015-9476 high The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates. same weakness: CWE-276