search-exclude.php in the "Search Exclude" plugin prior to 1.2.4 for WordPress allows unauthenticated options changes.
search exclude project search exclude