CVE-2015-9476: The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.

high Affects teardrop (WordPress theme). Feed 2026.10.29.1, updated 2026-10-28; published 2019-10-10; advisory modified 2026-06-17.

The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.

Package: teardrop (WordPress theme) WordPress
Affected versions: =1.8.1
Fixed in: no fix recorded
Severity: high CVSS 8.8
Exploitation: not on CISA KEV · EPSS 1% (71.5th percentile)
Published: 2019-10-10
Source: nvd

References

CWE-276

NVD record teardrop (WordPress theme) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs How findings are ranked

Related advisories

CVE-2021-38557 high raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the same weakness: CWE-276
CVE-2011-4285 medium Moodle Incorrect Default Settings same weakness: CWE-276
CVE-2020-24402 medium Magento incorrect permissions vulnerability in the Integrations component same weakness: CWE-276
CVE-2020-9392 high An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPres same weakness: CWE-276
CVE-2015-9474 high The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates. same weakness: CWE-276
CVE-2015-9475 high The Pont theme 1.5 for WordPress has insufficient restrictions on option updates. same weakness: CWE-276