diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index 815f9db6..a29a6d97 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -2851,6 +2851,11 @@ File Upload Vulnerability</title>
       <reference>http://www.exploit-db.com/exploits/17983/</reference>
       <type>SQLI</type>
     </vulnerability>
+    <vulnerability>
+      <title>WP Photo Album Plus &lt; 4.9.1 Full Path Disclosure</title>
+      <reference>http://1337day.com/exploit/20125</reference>
+      <type>FPD</type>
+    </vulnerability>
   </plugin>
 
   <plugin name="backwpup">
@@ -2874,5 +2879,13 @@ File Upload Vulnerability</title>
     </vulnerability>
   </plugin>
 
+  <plugin name="super-refer-a-friend">
+    <vulnerability>
+      <title>super-refer-a-friend &lt; 1.0 Full Path Disclosure</title>
+      <reference>http://1337day.com/exploit/20126</reference>
+      <type>FPD</type>
+    </vulnerability>
+  </plugin>
+
 </vulnerabilities>