diff --git a/data/theme_vulns.xml b/data/theme_vulns.xml
index 6662a450..16feb4c9 100644
--- a/data/theme_vulns.xml
+++ b/data/theme_vulns.xml
@@ -2089,7 +2089,7 @@
   <theme name="rayoflight-theme">
     <vulnerability>
       <title>Ray of Light - Remote File Upload Vulnerability</title>
-      <reference>
+      <references>
         <url>http://packetstormsecurity.com/files/123999/</url>
         <url>http://1337day.com/exploit/21512</url>
       </references>
@@ -2141,4 +2141,15 @@
     </vulnerability>
   </theme>
 
+  <theme name="highlight-powerful-premium-wordpress-theme">
+    <vulnerability>
+      <title>Highlight Powerful Premium - upload-handler.php File Upload CSRF</title>
+      <references>
+        <osvdb>99703</osvdb>
+        <url>http://packetstormsecurity.com/files/123974/</url>
+      </references>
+      <type>CSRF</type>
+    </vulnerability>
+  </theme>
+
 </vulnerabilities>