The Elegant Themes Extra theme prior to 1.2.4 for WordPress has privilege escalation.
elegantthemes extra