diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index bd1a3328..b0197cc6 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -11301,4 +11301,15 @@
     </vulnerability>
   </plugin>
 
+  <plugin name="google-analytics-mu">
+    <vulnerability>
+      <title>CSRF in WordPress plugin Google Analytics MU 2.3</title>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2014/Mar/20</url>
+      </references>
+      <type>CSRF</type>
+      <fixed_in>2.4</fixed_in>
+    </vulnerability>
+  </plugin>
+
 </vulnerabilities>
diff --git a/data/theme_vulns.xml b/data/theme_vulns.xml
index 0782fd48..99f08799 100644
--- a/data/theme_vulns.xml
+++ b/data/theme_vulns.xml
@@ -3010,4 +3010,14 @@
     </vulnerability>
   </theme>
 
+  <theme name="thecotton_v114">
+    <vulnerability>
+      <title>WordPress thecotton Themes Remote File Upload Vulnerability</title>
+      <references>
+        <url>http://seclists.org/bugtraq/2014/Mar/9</url>
+      </references>
+      <type>UPLOAD</type>
+    </vulnerability>
+  </theme>
+
 </vulnerabilities>