The Elegant Themes Monarch plugin prior to 1.2.7 for WordPress has privilege escalation.
elegantthemes monarch