diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index b273bb87..b6be88ec 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -4205,4 +4205,13 @@
     </vulnerability>
   </plugin>
 
+  <plugin name="social-media-widget">
+    <vulnerability>
+      <title>social-media-widget &lt; 4.0.1 malicious code</title>
+      <reference>http://plugins.trac.wordpress.org/changeset?reponame=&amp;old=691839%40social-media-widget%2Ftrunk&amp;new=693941%40social-media-widget%2Ftrunk</reference>
+      <reference>http://slashdot.org/submission/2592777/top-wordpress-widget-sold-off-turned-into-seo-spambot</reference>
+      <type>UNKNOWN</type>
+    </vulnerability>
+  </plugin>
+
 </vulnerabilities>