CVE-2015-9504 (weeklynews_theme) The weeklynews theme before 2.2.9 for WordPress has XSS via the s parameter. View Full Alert Related Posts CVE-2015-9504The weeklynews theme before 2.2.9 for WordPress has XSS via the s parameter. View Full Alert CVE-2015-9475The Pont theme 1.5 for WordPress has insufficient restrictions on option updates. View Full Alert CVE-2015-9474The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates. View Full Alert