https://wpvulndb.com/vulnerabilities/8748
and
http://seclists.org/fulldisclosure/2017/Feb/83
and
https://www.securify.nl/advisory/SFY...ess_theme.html
Don't know if this has been addressed.
@juggledad, Thanks for keeping up with your themes.