The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.
simpolio project simpolio 1.3.2