diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index fdffe0f3..22980fcf 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -6,17 +6,21 @@
   <plugin name="content-slide">
     <vulnerability>
       <title>Content Slide Plugin Cross-Site Requst Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/52949/</reference>
-      <reference>http://osvdb.org/93871</reference>
       <type>CSRF</type>
+      <references>
+        <osvdb>93871</osvdb>
+        <secunia>52949</secunia>
+      </references>
     </vulnerability>
   </plugin>
 
   <plugin name="wordpress-simple-paypal-shopping-cart">
     <vulnerability>
       <title>Simple Paypal Shopping Cart Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/52963/</reference>
-      <reference>http://osvdb.org/93953</reference>
+      <references>
+        <secunia>52963</secunia>
+        <osvdb>93953</osvdb>
+      </references>
       <type>CSRF</type>
       <fixed_in>3.6</fixed_in>
     </vulnerability>
@@ -25,14 +29,18 @@
   <plugin name="wp-sendsms">
     <vulnerability>
       <title>WP-SendSMS Plugin for WordPress Setting Manipulation CSRF</title>
-      <reference>http://secunia.com/advisories/53796/</reference>
-      <reference>http://osvdb.org/94209</reference>
-      <reference>http://www.exploit-db.com/exploits/26124</reference>
+      <references>
+        <secunia>53796</secunia>
+        <osvdb>94209</osvdb>
+        <exploitdb>26124</exploitdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
     <vulnerability>
       <title>WP-SendSMS Plugin for WordPress wp-admin/admin.php Multiple Parameter XSS</title>
-      <reference>http://osvdb.org/94210</reference>
+      <references>
+        <osvdb>94210</osvdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -40,8 +48,10 @@
   <plugin name="mail-subscribe-list">
     <vulnerability>
       <title>Mail Subscribe List Plugin Script Insertion Vulnerability</title>
-      <reference>http://secunia.com/advisories/53732/</reference>
-      <reference>http://osvdb.org/94197</reference>
+      <references>
+        <secunia>53732</secunia>
+        <osvdb>94197</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>2.1</fixed_in>
     </vulnerability>
@@ -50,8 +60,10 @@
   <plugin name="s3-video">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53437/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/66</reference>
+      <references>
+        <secunia>53437</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/66</url>
+      </references>
       <type>XSS</type>
       <fixed_in>0.98</fixed_in>
     </vulnerability>
@@ -60,8 +72,10 @@
   <plugin name="video-embed-thumbnail-generator">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53426/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/66</reference>
+      <references>
+        <secunia>53426</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/66</url>
+      </references>
       <type>XSS</type>
       <fixed_in>4.1</fixed_in>
     </vulnerability>
@@ -70,8 +84,10 @@
   <plugin name="1player">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53445/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/66</reference>
+      <references>
+        <secunia>53445</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/66</url>
+      </references>
       <type>XSS</type>
       <fixed_in>1.4</fixed_in>
     </vulnerability>
@@ -80,8 +96,10 @@
   <plugin name="external-video-for-everybody">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53396/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/66</reference>
+      <references>
+        <secunia>53396</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/66</url>
+      </references>
       <type>XSS</type>
       <fixed_in>2.1</fixed_in>
     </vulnerability>
@@ -90,7 +108,9 @@
   <plugin name="EasySqueezePage">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://seclists.org/fulldisclosure/2013/May/66</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/May/66</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -98,10 +118,11 @@
   <plugin name="crayon-syntax-highlighter">
     <vulnerability>
       <title>Crayon Syntax Highlighter Remote File Inclusion</title>
-      <reference>http://secunia.com/advisories/50804/</reference>
-      <reference>
-        http://ceriksen.com/2012/10/15/wordpress-crayon-syntax-highlighter-remote-file-inclusion-vulnerability/
-      </reference>
+      <references>
+        <secunia>50804</secunia>
+        <url>http://ceriksen.com/2012/10/15/wordpress-crayon-syntax-highlighter-remote-file-inclusion-vulnerability/
+        </url>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -109,13 +130,17 @@
   <plugin name="ungallery">
     <vulnerability>
       <title>UnGallery plugin &lt;= 1.5.8 Local File Disclosure Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17704/</reference>
+      <references>
+        <exploitdb>17704</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
     <vulnerability>
       <title>UnGallery Arbitrary Command Execution</title>
-      <reference>http://secunia.com/advisories/50875/</reference>
-      <reference>http://ceriksen.com/2012/10/23/wordpress-ungallery-remote-command-injection-vulnerability/</reference>
+      <references>
+        <secunia>50875</secunia>
+        <url>http://ceriksen.com/2012/10/23/wordpress-ungallery-remote-command-injection-vulnerability/</url>
+      </references>
       <type>RCE</type>
       <fixed_in>2.1.6</fixed_in>
     </vulnerability>
@@ -124,7 +149,9 @@
   <plugin name="thanks-you-counter-button">
     <vulnerability>
       <title>Thank You Counter Button XSS</title>
-      <reference>http://secunia.com/advisories/50977/</reference>
+      <references>
+        <secunia>50977</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>1.8.3</fixed_in>
     </vulnerability>
@@ -133,7 +160,9 @@
   <plugin name="bookings">
     <vulnerability>
       <title>Bookings XSS</title>
-      <reference>http://secunia.com/advisories/50975/</reference>
+      <references>
+        <secunia>50975</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>1.8.3</fixed_in>
     </vulnerability>
@@ -142,8 +171,10 @@
   <plugin name="cimy-user-manager">
     <vulnerability>
       <title>Cimy User Manager Arbitrary File Disclosure</title>
-      <reference>http://secunia.com/advisories/50834/</reference>
-      <reference>http://ceriksen.com/2012/10/24/wordpress-cimy-user-manager-arbitrary-file-disclosure/</reference>
+      <references>
+        <secunia>50834</secunia>
+        <url>http://ceriksen.com/2012/10/24/wordpress-cimy-user-manager-arbitrary-file-disclosure/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -151,16 +182,20 @@
   <plugin name="fs-real-estate-plugin">
     <vulnerability>
       <title>WordPress FireStorm Professional Real Estate Plugin "id" SQL Injection Vulnerability</title>
-      <reference>http://secunia.com/advisories/51107/</reference>
+      <references>
+        <secunia>51107</secunia>
+      </references>
       <type>SQLI</type>
       <fixed_in>2.06.04</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>FireStorm Professional Real Estate Plugin Multiple SQL Injection</title>
-      <reference>http://secunia.com/advisories/50873/</reference>
-      <reference>
-        http://ceriksen.com/2012/10/25/wordpress-firestorm-professional-real-estate-plugin-sql-injection-vulnerability/
-      </reference>
+      <references>
+        <secunia>50873</secunia>
+        <url>
+          http://ceriksen.com/2012/10/25/wordpress-firestorm-professional-real-estate-plugin-sql-injection-vulnerability/
+        </url>
+      </references>
       <type>SQLI</type>
       <fixed_in>2.06.03</fixed_in>
     </vulnerability>
@@ -169,12 +204,16 @@
   <plugin name="wp125">
     <vulnerability>
       <title>WP125 Multiple XSS</title>
-      <reference>http://secunia.com/advisories/50976/</reference>
+      <references>
+        <secunia>50976</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress WP125 Plugin CSRF</title>
-      <reference>http://www.securityfocus.com/bid/58934</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/58934</url>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.5.0</fixed_in>
     </vulnerability>
@@ -183,8 +222,10 @@
   <plugin name="all-video-gallery">
     <vulnerability>
       <title>Wordpress All Video Gallery Plugin Multiple SQL Injection Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50874/</reference>
-      <reference>http://ceriksen.com/2012/11/04/wordpress-all-video-gallery-plugin-sql-injection/</reference>
+      <references>
+        <secunia>50874</secunia>
+        <url>http://ceriksen.com/2012/11/04/wordpress-all-video-gallery-plugin-sql-injection/</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -192,7 +233,9 @@
   <plugin name="buddystream">
     <vulnerability>
       <title>BuddyStream XSS</title>
-      <reference>http://secunia.com/advisories/50972/</reference>
+      <references>
+        <secunia>50972</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -200,7 +243,9 @@
   <plugin name="post-views">
     <vulnerability>
       <title>post-views XSS</title>
-      <reference>http://secunia.com/advisories/50982/</reference>
+      <references>
+        <secunia>50982</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -208,9 +253,10 @@
   <plugin name="floating-social-media-links">
     <vulnerability>
       <title>Floating Social Media Links Remote File Inclusion</title>
-      <reference>http://secunia.com/advisories/51346/</reference>
-      <reference>http://ceriksen.com/2013/01/12/wordpress-floating-social-media-link-plugins-remote-file-inclusion/
-      </reference>
+      <references>
+        <secunia>51346</secunia>
+        <url>http://ceriksen.com/2013/01/12/wordpress-floating-social-media-link-plugins-remote-file-inclusion/</url>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -218,8 +264,10 @@
   <plugin name="zingiri-forum">
     <vulnerability>
       <title>Zingiri Forum Arbitrary File Disclosure</title>
-      <reference>http://secunia.com/advisories/50833/</reference>
-      <reference>http://ceriksen.com/2013/01/12/wordpress-zingiri-forums-arbitrary-file-disclosure/</reference>
+      <references>
+        <secunia>50833</secunia>
+        <url>http://ceriksen.com/2013/01/12/wordpress-zingiri-forums-arbitrary-file-disclosure/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -227,11 +275,13 @@
   <plugin name="google-document-embedder">
     <vulnerability>
       <title>Google Document Embedder Arbitrary File Disclosure</title>
-      <reference>http://www.exploit-db.com/exploits/23970/</reference>
-      <reference>http://ceriksen.com/2013/01/03/wordpress-google-document-embedder-arbitrary-file-disclosure/
-      </reference>
-      <reference>http://secunia.com/advisories/50832/</reference>
-      <metasploit>exploit/unix/webapp/wp_google_document_embedder_exec</metasploit>
+      <references>
+        <exploitdb>23970</exploitdb>
+        <url>http://ceriksen.com/2013/01/03/wordpress-google-document-embedder-arbitrary-file-disclosure/
+        </url>
+        <secunia>50832</secunia>
+        <metasploit>exploit/unix/webapp/wp_google_document_embedder_exec</metasploit>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>2.5.4</fixed_in>
     </vulnerability>
@@ -240,7 +290,9 @@
   <plugin name="extended-user-profile">
     <vulnerability>
       <title>extended-user-profile Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20118</reference>
+      <references>
+        <url>http://1337day.com/exploit/20118</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -248,7 +300,9 @@
   <plugin name="superslider-show">
     <vulnerability>
       <title>superslider-show Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20117</reference>
+      <references>
+        <url>http://1337day.com/exploit/20117</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -256,7 +310,9 @@
   <plugin name="wordpress-multibox-plugin">
     <vulnerability>
       <title>multibox plugin Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20119</reference>
+      <references>
+        <url>http://1337day.com/exploit/20119</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -264,8 +320,10 @@
   <plugin name="contest/OpenInviter">
     <vulnerability>
       <title>OpenInviter Information Disclosure</title>
-      <reference>http://packetstormsecurity.com/files/119265/WordPress-OpenInviter-Information-Disclosure.html
-      </reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/119265/WordPress-OpenInviter-Information-Disclosure.html
+        </url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -273,7 +331,9 @@
   <plugin name="RokBox">
     <vulnerability>
       <title>RokBox Multiple Vulnerabilities</title>
-      <reference>http://1337day.com/exploit/19981</reference>
+      <references>
+        <url>http://1337day.com/exploit/19981</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -281,7 +341,9 @@
   <plugin name="grou-random-image-widget">
     <vulnerability>
       <title>grou-random-image-widget Full Path Disclosure</title>
-      <reference>http://1337day.com/exploit/20047</reference>
+      <references>
+        <url>http://1337day.com/exploit/20047</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -289,13 +351,16 @@
   <plugin name="sintic_gallery">
     <vulnerability>
       <title>sintic_gallery Arbitrary File Upload Vulnerability</title>
-      <reference>http://1337day.com/exploit/19993</reference>
-      <!-- Metasploit : <reference>http://1337day.com/exploit/20065</reference> -->
+      <references>
+        <url>http://1337day.com/exploit/19993</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>sintic_gallery Path Disclosure Vulnerability</title>
-      <reference>http://1337day.com/exploit/20020</reference>
+      <references>
+        <url>http://1337day.com/exploit/20020</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -303,12 +368,16 @@
   <plugin name="wp-useronline">
     <vulnerability>
       <title>WP-UserOnline Full Path Disclosure</title>
-      <reference>http://seclists.org/fulldisclosure/2010/Jul/8</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2010/Jul/8</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
     <vulnerability>
       <title>Wp-UserOnline &lt;= 0.62 Persistent XSS</title>
-      <reference>http://seclists.org/fulldisclosure/2010/Jul/8</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2010/Jul/8</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -316,8 +385,10 @@
   <plugin name="levelfourstorefront">
     <vulnerability>
       <title>Shopping Cart Shell Upload / SQL Injection</title>
-      <reference>http://packetstormsecurity.com/files/119217/wplevelfour-sqlshell.txt</reference>
-      <reference>http://secunia.com/advisories/51690/</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/119217/wplevelfour-sqlshell.txt</url>
+        <secunia>51690</secunia>
+      </references>
       <type>MULTI</type>
       <fixed_in>8.1.15</fixed_in>
     </vulnerability>
@@ -326,7 +397,9 @@
   <plugin name="reflex-gallery">
     <vulnerability>
       <title>ReFlex Gallery Shell Upload</title>
-      <reference>http://packetstormsecurity.com/files/119218/wpreflexgallery-shell.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/119218/wpreflexgallery-shell.txt</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -334,7 +407,9 @@
   <plugin name="uploader">
     <vulnerability>
       <title>Uploader 1.0.4 Shell Upload</title>
-      <reference>http://packetstormsecurity.com/files/119219/wpuploader104-shell.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/119219/wpuploader104-shell.txt</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -342,7 +417,9 @@
   <plugin name="xerte-online">
     <vulnerability>
       <title>Xerte Online 0.32 Shell Upload</title>
-      <reference>http://packetstormsecurity.com/files/119220/wpxerteonline-shell.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/119220/wpxerteonline-shell.txt</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -350,9 +427,11 @@
   <plugin name="advanced-custom-fields">
     <vulnerability>
       <title>Advanced Custom Fields &lt;= 3.5.1 Remote File Inclusion</title>
-      <reference>http://packetstormsecurity.com/files/119221/wp_advanced_custom_fields_exec.rb.txt</reference>
-      <reference>http://secunia.com/advisories/51037/</reference>
-      <metasploit>exploit/unix/webapp/wp_advanced_custom_fields_exec</metasploit>
+      <references>
+        <url>http://packetstormsecurity.com/files/119221/wp_advanced_custom_fields_exec.rb.txt</url>
+        <secunia>51037</secunia>
+        <metasploit>exploit/unix/webapp/wp_advanced_custom_fields_exec</metasploit>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -360,7 +439,9 @@
   <plugin name="sitepress-multilingual-cms">
     <vulnerability>
       <title>Wordpress sitepress-multilingual-cms Full Path Disclosure</title>
-      <reference>http://1337day.com/exploit/20067</reference>
+      <references>
+        <url>http://1337day.com/exploit/20067</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -368,14 +449,18 @@
   <plugin name="asset-manager">
     <vulnerability>
       <title>Asset Manager 0.2 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/18993/</reference>
+      <references>
+        <exploitdb>18993</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress plugin Asset manager upload.php Arbitrary Code Execution</title>
-      <reference>
-        http://www.ethicalhack3r.co.uk/security/wordpress-plugin-asset-manager-upload-php-arbitrary-code-execution/
-      </reference>
+      <references>
+        <url>
+          http://www.ethicalhack3r.co.uk/security/wordpress-plugin-asset-manager-upload-php-arbitrary-code-execution/
+        </url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -383,7 +468,9 @@
   <plugin name="apptha-banner">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -391,7 +478,9 @@
   <plugin name="apptha-slider-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -399,7 +488,9 @@
   <plugin name="blaze-slide-show-for-wordpress">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -407,7 +498,9 @@
   <plugin name="comment-extra-field">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -415,7 +508,9 @@
   <plugin name="fluid-accessible-rich-inline-edit">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -423,7 +518,9 @@
   <plugin name="fluid-accessible-pager">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -431,7 +528,9 @@
   <plugin name="fluid-accessible-uploader">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -439,7 +538,9 @@
   <plugin name="fluid-accessible-ui-options">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -447,7 +548,9 @@
   <plugin name="fresh-page">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -455,7 +558,9 @@
   <plugin name="mac-dock-photogallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -463,7 +568,9 @@
   <plugin name="pdw-file-browser">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -471,12 +578,16 @@
   <plugin name="power-zoomer">
     <vulnerability>
       <title>powerzoomer Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20253</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20253</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -484,7 +595,9 @@
   <plugin name="slide-show-pro">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -492,7 +605,9 @@
   <plugin name="smart-slide-show">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -500,7 +615,9 @@
   <plugin name="spotlightyour">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -508,7 +625,9 @@
   <plugin name="sprapid">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -516,8 +635,10 @@
   <plugin name="ultimate-tinymce">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
-      <reference>http://secunia.com/advisories/51224/</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+        <secunia>51224</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -525,7 +646,9 @@
   <plugin name="wp-3dbanner-rotator">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -533,12 +656,16 @@
   <plugin name="wp-3dflick-slideshow">
     <vulnerability>
       <title>wp-3dflick-slideshow Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20255</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20255</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -546,7 +673,9 @@
   <plugin name="wp-bliss-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -554,13 +683,17 @@
   <plugin name="wp-carouselslideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
-      <reference>http://secunia.com/advisories/51250/</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+        <secunia>51250</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Carousel Slideshow Plugin Unspecified Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50377/</reference>
+      <references>
+        <secunia>50377</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>3.10</fixed_in>
     </vulnerability>
@@ -569,7 +702,9 @@
   <plugin name="wp-dreamworkgallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -577,7 +712,9 @@
   <plugin name="wp-ecommerce-cvs-importer">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -585,7 +722,9 @@
   <plugin name="wp-extended">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -593,7 +732,9 @@
   <plugin name="wp-flipslideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -601,12 +742,16 @@
   <plugin name="wp-homepage-slideshow">
     <vulnerability>
       <title>wp-homepage-slideshow Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20260</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20260</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -614,17 +759,23 @@
   <plugin name="wp-image-news-slider">
     <vulnerability>
       <title>wp-image-news-slider Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20259</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20259</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Image News slider Plugin Unspecified Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50390/</reference>
+      <references>
+        <secunia>50390</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>3.4</fixed_in>
     </vulnerability>
@@ -633,12 +784,16 @@
   <plugin name="wp-levoslideshow">
     <vulnerability>
       <title>wp-levoslideshow Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20250</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20250</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -646,7 +801,9 @@
   <plugin name="wp-matrix-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -654,12 +811,16 @@
   <plugin name="wp-powerplaygallery">
     <vulnerability>
       <title>wp-powerplaygallery Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20252</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20252</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -667,12 +828,16 @@
   <plugin name="wp-royal-gallery">
     <vulnerability>
       <title>wp-royal-gallery Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20261</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20261</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -680,12 +845,16 @@
   <plugin name="wp-superb-slideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>wp superb Slideshow Full Path Disclosure</title>
-      <reference>http://1337day.com/exploit/19979</reference>
+      <references>
+        <url>http://1337day.com/exploit/19979</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -693,7 +862,9 @@
   <plugin name="wp-vertical-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -701,7 +872,9 @@
   <plugin name="wp-yasslideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -709,9 +882,11 @@
   <plugin name="cardoza-ajax-search">
     <vulnerability>
       <title>Ajax Post Search Sql Injection</title>
-      <reference>http://seclists.org/bugtraq/2012/Nov/33</reference>
-      <reference>http://secunia.com/advisories/51205/</reference>
-      <reference>http://www.girlinthemiddle.net/2012/10/sqli-vulnerability-in-ajax-post-search.html</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2012/Nov/33</url>
+        <secunia>51205</secunia>
+        <url>http://www.girlinthemiddle.net/2012/10/sqli-vulnerability-in-ajax-post-search.html</url>
+      </references>
       <type>SQLI</type>
       <fixed_in>1.3</fixed_in>
     </vulnerability>
@@ -720,8 +895,10 @@
   <plugin name="answer-my-question">
     <vulnerability>
       <title>Answer My Question 1.1 Multiple XSS</title>
-      <reference>http://www.securityfocus.com/archive/1/524625/30/0/threaded</reference>
-      <reference>http://secunia.com/advisories/50655/</reference>
+      <references>
+        <url>http://www.securityfocus.com/archive/1/524625/30/0/threaded</url>
+        <secunia>50655</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -729,13 +906,17 @@
   <plugin name="catalog">
     <vulnerability>
       <title>Catalog HTML Code Injection and Cross-site scripting</title>
-      <reference>http://packetstormsecurity.org/files/117820/wpcatalog-xss.txt</reference>
-      <reference>http://secunia.com/advisories/51143/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/117820/wpcatalog-xss.txt</url>
+        <secunia>51143</secunia>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Spider Catalog Plugin Multiple SQL Injection and Cross Site Scripting Vulnerabilities</title>
-      <reference>http://www.securityfocus.com/bid/60079/info</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/60079/info</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -743,8 +924,10 @@
   <plugin name="wordfence">
     <vulnerability>
       <title>Wordfence 3.3.5 XSS and IAA</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Oct/139</reference>
-      <reference>http://secunia.com/advisories/51055/</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Oct/139</url>
+        <secunia>51055</secunia>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -752,12 +935,16 @@
   <plugin name="slideshow-jquery-image-gallery">
     <vulnerability>
       <title>Slideshow jQuery Image Gallery Multiple Vulnerabilities</title>
-      <reference>http://www.waraxe.us/advisory-92.html</reference>
+      <references>
+        <url>http://www.waraxe.us/advisory-92.html</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Slideshow Plugin Multiple Script Insertion Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/51135/</reference>
+      <references>
+        <secunia>51135</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -765,7 +952,9 @@
   <plugin name="social-discussions">
     <vulnerability>
       <title>Social Discussions Multiple Vulnerabilities</title>
-      <reference>http://www.waraxe.us/advisory-93.html</reference>
+      <references>
+        <url>http://www.waraxe.us/advisory-93.html</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -773,9 +962,11 @@
   <plugin name="abtest">
     <vulnerability>
       <title>ABtest Directory Traversal</title>
-      <reference>
-        http://scott-herbert.com/blog/2012/10/11/wordpress-plugin-abtest-vulnerable-to-a-directory-traversal-attack-1110
-      </reference>
+      <references>
+        <url>
+          http://scott-herbert.com/blog/2012/10/11/wordpress-plugin-abtest-vulnerable-to-a-directory-traversal-attack-1110
+        </url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -783,7 +974,9 @@
   <plugin name="bbpress">
     <vulnerability>
       <title>BBPress SQL Injection / Path Disclosure</title>
-      <reference>http://packetstormsecurity.org/files/116123</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/116123</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -791,7 +984,9 @@
   <plugin name="nextgen_cu3er_gallery">
     <vulnerability>
       <title>NextGen Cu3er Gallery Information Disclosure</title>
-      <reference>http://packetstormsecurity.org/files/116150</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/116150</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -799,7 +994,9 @@
   <plugin name="rich-widget">
     <vulnerability>
       <title>Rich Widget File Upload</title>
-      <reference>http://packetstormsecurity.org/files/115787/wprichwidget-shell.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/115787/wprichwidget-shell.txt</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -807,7 +1004,9 @@
   <plugin name="monsters-editor-10-for-wp-super-edit">
     <vulnerability>
       <title>Monsters Editor Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/115788/wpmonsters-shell.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/115788/wpmonsters-shell.txt</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -815,7 +1014,9 @@
   <plugin name="quick-post-widget">
     <vulnerability>
       <title>Quick Post Widget 1.9.1 Multiple Cross-site scripting vulnerabilities</title>
-      <reference>http://seclists.org/bugtraq/2012/Aug/66</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2012/Aug/66</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -823,7 +1024,9 @@
   <plugin name="threewp-email-reflector">
     <vulnerability>
       <title>ThreeWP Email Reflector 1.13 Stored XSS</title>
-      <reference>http://www.exploit-db.com/exploits/20365/</reference>
+      <references>
+        <exploitdb>20365</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -831,8 +1034,10 @@
   <plugin name="wp-simplemail">
     <vulnerability>
       <title>SimpleMail 1.0.6 Stored XSS</title>
-      <reference>http://www.exploit-db.com/exploits/20361/</reference>
-      <reference>http://secunia.com/advisories/50208/</reference>
+      <references>
+        <exploitdb>20361</exploitdb>
+        <secunia>50208</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -840,8 +1045,10 @@
   <plugin name="postie">
     <vulnerability>
       <title>Postie 1.4.3 Stored XSS</title>
-      <reference>http://www.exploit-db.com/exploits/20360/</reference>
-      <reference>http://secunia.com/advisories/50207/</reference>
+      <references>
+        <exploitdb>20360</exploitdb>
+        <secunia>50207</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -849,8 +1056,10 @@
   <plugin name="rsvpmaker">
     <vulnerability>
       <title>RSVPMaker v2.5.4 Persistent XSS</title>
-      <reference>http://www.exploit-db.com/exploits/20474/</reference>
-      <reference>http://secunia.com/advisories/50289/</reference>
+      <references>
+        <exploitdb>20474</exploitdb>
+        <secunia>50289</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -858,8 +1067,10 @@
   <plugin name="mz-jajak">
     <vulnerability>
       <title>Mz-jajak &lt;= 2.1 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/20416/</reference>
-      <reference>http://secunia.com/advisories/50217/</reference>
+      <references>
+        <exploitdb>20416</exploitdb>
+        <secunia>50217</secunia>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -867,7 +1078,9 @@
   <plugin name="resume-submissions-job-postings">
     <vulnerability>
       <title>Resume Submissions Job Posting v2.5.1 Unrestricted File Upload</title>
-      <reference>http://www.packetstormsecurity.org/files/114716</reference>
+      <references>
+        <url>http://www.packetstormsecurity.org/files/114716</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -875,7 +1088,10 @@
   <plugin name="wp-predict">
     <vulnerability>
       <title>WP-Predict v1.0 Blind SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/19715/</reference>
+      <references>
+        <exploitdb>19715</exploitdb>
+
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -883,8 +1099,10 @@
   <plugin name="backup">
     <vulnerability>
       <title>Backup Plugin Information Disclosure</title>
-      <reference>http://www.exploit-db.com/exploits/19524/</reference>
-      <reference>http://secunia.com/advisories/50038/</reference>
+      <references>
+        <exploitdb>19524</exploitdb>
+        <secunia>50038</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>2.1</fixed_in>
     </vulnerability>
@@ -893,7 +1111,9 @@
   <plugin name="moodthingy-mood-rating-widget">
     <vulnerability>
       <title>MoodThingy Widget v0.8.7 Blind SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/19572/</reference>
+      <references>
+        <exploitdb>19572</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -901,7 +1121,9 @@
   <plugin name="paid-business-listings">
     <vulnerability>
       <title>Paid Business Listings v1.0.2 Blind SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/19481/</reference>
+      <references>
+        <exploitdb>19481</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -909,7 +1131,9 @@
   <plugin name="website-faq">
     <vulnerability>
       <title>Website FAQ Plugin v1.0 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/19400/</reference>
+      <references>
+        <exploitdb>19400</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -917,7 +1141,9 @@
   <plugin name="radykal-fancy-gallery">
     <vulnerability>
       <title>Fancy Gallery 1.2.4 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/114114/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114114/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -925,7 +1151,9 @@
   <plugin name="flipbook">
     <vulnerability>
       <title>Flip Book 1.0 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/114112/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114112/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -933,7 +1161,9 @@
   <plugin name="ajax_multi_upload">
     <vulnerability>
       <title>Ajax Multi Upload 1.1 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/114109/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114109/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -941,7 +1171,9 @@
   <plugin name="schreikasten">
     <vulnerability>
       <title>Schreikasten 0.14.13 XSS</title>
-      <reference>http://www.exploit-db.com/exploits/19294/</reference>
+      <references>
+        <exploitdb>19294</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -949,7 +1181,9 @@
   <plugin name="wp-automatic">
     <vulnerability>
       <title>Wordpress Automatic 2.0.3 CSRF</title>
-      <reference>http://packetstormsecurity.org/files/113763/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113763/</url>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -959,7 +1193,9 @@
       <title>VideoWhisper Video Conference
         4.51 Arbitrary File Upload Vulnerability
       </title>
-      <reference>http://packetstormsecurity.org/files/113580/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113580/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -969,7 +1205,9 @@
       <title>Auctions Plugin 2.0.1.3 Arbitrary
         File Upload Vulnerability
       </title>
-      <reference>http://packetstormsecurity.org/files/113568/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113568/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -977,7 +1215,9 @@
   <plugin name="lb-mixed-slideshow">
     <vulnerability>
       <title>LB Mixed Slideshow 1.0 Arbitrary File Upload Vulnerability</title>
-      <reference>http://packetstormsecurity.org/files/113844/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113844/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -985,7 +1225,9 @@
   <plugin name="lim4wp">
     <vulnerability>
       <title>Lim4wp 1.1.1 Arbitrary File Upload Vulnerability</title>
-      <reference>http://packetstormsecurity.org/files/113846/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113846/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -993,7 +1235,9 @@
   <plugin name="wp-imagezoom">
     <vulnerability>
       <title>Wp-ImageZoom 1.0.3 Remote File Disclosure</title>
-      <reference>http://packetstormsecurity.org/files/113845/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113845/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1001,7 +1245,9 @@
   <plugin name="invit0r">
     <vulnerability>
       <title>Invit0r 0.22 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/113639/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113639/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1009,7 +1255,9 @@
   <plugin name="announces">
     <vulnerability>
       <title>Annonces 1.2.0.1 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/113637/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113637/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1019,7 +1267,9 @@
       <title>Contus Video Gallery 1.3 Arbitrary
         File Upload Vulnerability
       </title>
-      <reference>http://packetstormsecurity.org/files/113571/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113571/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1027,14 +1277,18 @@
   <plugin name="contus-hd-flv-player">
     <vulnerability>
       <title>Contus HD FLV Player plugin &lt;= 1.3 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17678/</reference>
+      <references>
+        <exploitdb>17678</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Contus HD FLV Player 1.7 Arbitrary
         File Upload Vulnerability
       </title>
-      <reference>http://packetstormsecurity.org/files/113570/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113570/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
 
@@ -1043,7 +1297,9 @@
   <plugin name="user-meta">
     <vulnerability>
       <title>User Meta Version 1.1.1 Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/19052/</reference>
+      <references>
+        <exploitdb>19052</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1051,7 +1307,9 @@
   <plugin name="topquark">
     <vulnerability>
       <title>Top Quark Architecture Version 2.10 Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/19053/</reference>
+      <references>
+        <exploitdb>19053</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1059,7 +1317,9 @@
   <plugin name="sfbrowser">
     <vulnerability>
       <title>SfBrowser Version 1.4.5 Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/19054/</reference>
+      <references>
+        <exploitdb>19054</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1067,17 +1327,23 @@
   <plugin name="pica-photo-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Pica Photo Gallery 1.0 Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/19055/</reference>
+      <references>
+        <exploitdb>19055</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>PICA Photo Gallery 1.0 Remote File Disclosure</title>
-      <reference>http://www.exploit-db.com/exploits/19016/</reference>
+      <references>
+        <exploitdb>19016</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1085,23 +1351,31 @@
   <plugin name="mac-dock-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Mac Photo Gallery Plugin Two Security Bypass Security Issues</title>
-      <reference>http://secunia.com/advisories/49923/</reference>
+      <references>
+        <secunia>49923</secunia>
+      </references>
       <type>AUTHBYPASS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Mac Photo Gallery Plugin Multiple Script Insertion Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/49836/</reference>
+      <references>
+        <secunia>49836</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>3.0</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>Mac Photo Gallery 2.7 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/19056/</reference>
+      <references>
+        <exploitdb>19056</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1109,7 +1383,9 @@
   <plugin name="drag-drop-file-uploader">
     <vulnerability>
       <title>drag and drop file upload 0.1 Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/19057/</reference>
+      <references>
+        <exploitdb>19057</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1117,7 +1393,9 @@
   <plugin name="custom-content-type-manager">
     <vulnerability>
       <title>Custom Content Type Manager 0.9.5.13-pl Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/19058/</reference>
+      <references>
+        <exploitdb>19058</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1125,7 +1403,9 @@
   <plugin name="wp-gpx-map">
     <vulnerability>
       <title>wp-gpx-max version 1.1.21 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/19050/</reference>
+      <references>
+        <exploitdb>19050</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1133,7 +1413,9 @@
   <plugin name="front-file-manager">
     <vulnerability>
       <title>Front File Manager Plugin 0.1 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/19012/</reference>
+      <references>
+        <exploitdb>19012</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1141,12 +1423,16 @@
   <plugin name="front-end-upload">
     <vulnerability>
       <title>Front End Upload 0.5.3 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/19008/</reference>
+      <references>
+        <exploitdb>19008</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>Front End Upload v0.5.4 Arbitrary PHP File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/20083/</reference>
+      <references>
+        <exploitdb>20083</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1154,7 +1440,9 @@
   <plugin name="omni-secure-files">
     <vulnerability>
       <title>Omni Secure Files 0.1.13 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/19009/</reference>
+      <references>
+        <exploitdb>19009</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1162,7 +1450,9 @@
   <plugin name="easy-contact-forms-exporter">
     <vulnerability>
       <title>Easy Contact Forms Export 1.1.0 Information Disclosure Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/19013/</reference>
+      <references>
+        <exploitdb>19013</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1170,7 +1460,9 @@
   <plugin name="plugin-newsletter">
     <vulnerability>
       <title>Plugin: Newsletter 1.5 Remote File Disclosure Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/19018/</reference>
+      <references>
+        <exploitdb>19018</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1178,7 +1470,9 @@
   <plugin name="rbxgallery">
     <vulnerability>
       <title>RBX Gallery 2.1 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/19019/</reference>
+      <references>
+        <exploitdb>19019</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1186,7 +1480,9 @@
   <plugin name="simple-download-button-shortcode">
     <vulnerability>
       <title>Simple Download Button Shortcode 1.0 Remote File Disclosure</title>
-      <reference>http://www.exploit-db.com/exploits/19020/</reference>
+      <references>
+        <exploitdb>19020</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1194,7 +1490,9 @@
   <plugin name="thinkun-remind">
     <vulnerability>
       <title>Thinkun Remind 1.1.3 Remote File Disclosure</title>
-      <reference>http://www.exploit-db.com/exploits/19021/</reference>
+      <references>
+        <exploitdb>19021</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1202,7 +1500,9 @@
   <plugin name="tinymce-thumbnail-gallery">
     <vulnerability>
       <title>Tinymce Thumbnail Gallery 1.0.7 Remote File Disclosure</title>
-      <reference>http://www.exploit-db.com/exploits/19022/</reference>
+      <references>
+        <exploitdb>19022</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1210,7 +1510,9 @@
   <plugin name="wpstorecart">
     <vulnerability>
       <title>wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/19023/</reference>
+      <references>
+        <exploitdb>19023</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1218,7 +1520,9 @@
   <plugin name="gallery-plugin">
     <vulnerability>
       <title>Gallery 3.06 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/18998/</reference>
+      <references>
+        <exploitdb>18998</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1226,7 +1530,9 @@
   <plugin name="font-uploader">
     <vulnerability>
       <title>Font Uploader 1.2.4 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/18994/</reference>
+      <references>
+        <exploitdb>18994</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1234,7 +1540,9 @@
   <plugin name="wp-property">
     <vulnerability>
       <title>WP-Property 1.35.0 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/18987/</reference>
+      <references>
+        <exploitdb>18987</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1242,7 +1550,9 @@
   <plugin name="wpmarketplace">
     <vulnerability>
       <title>WP Marketplace 1.5.0 - 1.6.1 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/18988/</reference>
+      <references>
+        <exploitdb>18988</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1250,12 +1560,16 @@
   <plugin name="store-locator-le">
     <vulnerability>
       <title>Google Maps via Store Locator Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/18989/</reference>
+      <references>
+        <exploitdb>18989</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>store-locator-le SQL Injection</title>
-      <reference>http://secunia.com/advisories/51757/</reference>
+      <references>
+        <secunia>51757</secunia>
+      </references>
       <type>SQLI</type>
       <fixed_in>3.8.7</fixed_in>
     </vulnerability>
@@ -1264,7 +1578,9 @@
   <plugin name="html5avmanager">
     <vulnerability>
       <title>HTML5 AV Manager 0.2.7 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/18990/</reference>
+      <references>
+        <exploitdb>18990</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1272,15 +1588,20 @@
   <plugin name="foxypress">
     <vulnerability>
       <title>Foxypress 0.4.1.1 - 0.4.2.1 Arbitrary File Upload</title>
-      <reference>http://packetstormsecurity.org/files/113576/, http://www.exploit-db.com/exploits/18991/,
-        http://www.exploit-db.com/exploits/19100/
-      </reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113576/</url>
+        <exploitdb>18991</exploitdb>
+        <exploitdb>19100</exploitdb>
+      </references>
+
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>FoxyPress 0.4.2.5 XSS / CSRF / SQL Injection</title>
-      <reference>http://packetstormsecurity.org/files/117768</reference>
-      <reference>http://secunia.com/advisories/51109/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/117768</url>
+        <secunia>51109</secunia>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -1288,7 +1609,9 @@
   <plugin name="track-that-stat">
     <vulnerability>
       <title>Track That Stat &lt;= 1.0.8 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112722/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112722/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1296,7 +1619,9 @@
   <plugin name="wp-facethumb">
     <vulnerability>
       <title>WP-Facethumb Gallery &lt;= 0.1 Reflected Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112658/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112658/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1304,7 +1629,9 @@
   <plugin name="wp-survey-and-quiz-tool">
     <vulnerability>
       <title>Survey And Quiz Tool &lt;= 2.9.2 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112685/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112685/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1312,7 +1639,9 @@
   <plugin name="wp-statistics">
     <vulnerability>
       <title>WP Statistics &lt;= 2.2.4 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112686/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112686/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1320,12 +1649,16 @@
   <plugin name="wp-easy-gallery">
     <vulnerability>
       <title>WP Easy Gallery &lt;= 1.7 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112687/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112687/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WP Easy Gallery &lt;= 2.7 CSRF</title>
-      <reference>http://plugins.trac.wordpress.org/changeset?reponame=&amp;old=669527%40wp-easy-gallery&amp;new=669527%40wp-easy-gallery</reference>
+      <references>
+        <url>http://plugins.trac.wordpress.org/changeset?reponame=&amp;old=669527%40wp-easy-gallery&amp;new=669527%40wp-easy-gallery</url>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -1333,7 +1666,9 @@
   <plugin name="subscribe2">
     <vulnerability>
       <title>Subscribe2 &lt;= 8.0 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112688/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112688/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1341,7 +1676,9 @@
   <plugin name="soundcloud-is-gold">
     <vulnerability>
       <title>Soundcloud Is Gold &lt;= 2.1 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112689/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112689/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1349,12 +1686,16 @@
   <plugin name="sharebar">
     <vulnerability>
       <title>Sharebar &lt;= 1.2.5 Button Manipulation CSRF</title>
-      <reference>http://osvdb.org/94843</reference>
+      <references>
+        <osvdb>94843</osvdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
     <vulnerability>
       <title>Sharebar &lt;= 1.2.1 SQL Injection / Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112690/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112690/</url>
+      </references>
       <type>MULTI</type>
       <fixed_in>1.2.2</fixed_in>
     </vulnerability>
@@ -1363,7 +1704,9 @@
   <plugin name="share-and-follow">
     <vulnerability>
       <title>Share And Follow &lt;= 1.80.3 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112691/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112691/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1371,7 +1714,9 @@
   <plugin name="sabre">
     <vulnerability>
       <title>SABRE &lt;= 1.2.0 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112692/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112692/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1379,19 +1724,25 @@
   <plugin name="pretty-link">
     <vulnerability>
       <title>Pretty Link Lite &lt;= 1.5.2 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112693/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112693/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Pretty Link Lite &lt;= 1.6.1 Cross Site Scripting</title>
-      <reference>http://secunia.com/advisories/50980/</reference>
+      <references>
+        <secunia>50980</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress pretty-link plugin XSS in SWF</title>
-      <reference>http://seclists.org/bugtraq/2013/Feb/100</reference>
-      <reference>http://packetstormsecurity.com/files/120433/wpprettylink163-xss.txt</reference>
-      <cve>2013-1636</cve>
+      <references>
+        <url>http://seclists.org/bugtraq/2013/Feb/100</url>
+        <url>http://packetstormsecurity.com/files/120433/wpprettylink163-xss.txt</url>
+        <cve>2013-1636</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1399,7 +1750,9 @@
   <plugin name="newsletter-manager">
     <vulnerability>
       <title>Newsletter Manager &lt;= 1.0 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112694/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112694/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1407,7 +1760,9 @@
   <plugin name="network-publisher">
     <vulnerability>
       <title>Network Publisher &lt;= 5.0.1 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112695/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112695/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1415,13 +1770,17 @@
   <plugin name="leaguemanager">
     <vulnerability>
       <title>LeagueManager &lt;= 3.7 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112698/</reference>
-      <reference>http://secunia.com/advisories/49949/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112698/</url>
+        <secunia>49949</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>LeagueManager v3.8 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/24789/</reference>
+      <references>
+        <exploitdb>24789</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1429,7 +1788,9 @@
   <plugin name="leaflet">
     <vulnerability>
       <title>Leaflet &lt;= 0.0.1 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112699/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112699/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1437,7 +1798,9 @@
   <plugin name="joliprint">
     <vulnerability>
       <title>PDF And Print Button Joliprint &lt;= 1.3.0 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112700/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112700/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1445,7 +1808,9 @@
   <plugin name="iframe-admin-pages">
     <vulnerability>
       <title>IFrame Admin Pages &lt;= 0.1 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112701/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112701/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1453,7 +1818,9 @@
   <plugin name="ezpz-one-click-backup">
     <vulnerability>
       <title>EZPZ One Click Backup &lt;= 12.03.10 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112705/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112705/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1461,7 +1828,9 @@
   <plugin name="dynamic-widgets">
     <vulnerability>
       <title>Dynamic Widgets &lt;= 1.5.1 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112706/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112706/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1469,22 +1838,28 @@
   <plugin name="download-monitor">
     <vulnerability>
       <title>Download Monitor &lt; 3.3.6.2 Cross Site Scripting</title>
-      <reference>http://www.securityfocus.com/bid/61407</reference>
-      <reference>http://secunia.com/advisories/53116</reference>
-      <cve>2013-5098</cve>
-      <cve>2013-3262</cve>
+      <references>
+        <url>http://www.securityfocus.com/bid/61407</url>
+        <secunia>53116</secunia>
+        <cve>2013-5098</cve>
+        <cve>2013-3262</cve>
+      </references>
       <type>XSS</type>
       <fixed_in>3.3.6.2</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>Download Monitor &lt;= 3.3.5.7 Cross Site Scripting</title>
-      <reference>http://www.reactionpenetrationtesting.co.uk/wordpress-download-monitor-xss.html</reference>
-      <reference>http://secunia.com/advisories/50511/</reference>
+      <references>
+        <url>http://www.reactionpenetrationtesting.co.uk/wordpress-download-monitor-xss.html</url>
+        <secunia>50511</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Download Monitor &lt;= 3.3.5.4 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112707/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112707/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1492,7 +1867,9 @@
   <plugin name="download-manager">
     <vulnerability>
       <title>Download Manager &lt;= 2.2 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112708/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112708/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1500,7 +1877,9 @@
   <plugin name="codestyling-localization">
     <vulnerability>
       <title>Code Styling Localization &lt;= 1.99.16 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112709/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112709/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1508,7 +1887,9 @@
   <plugin name="catablog">
     <vulnerability>
       <title>Catablog &lt;= 1.6 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112619/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112619/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1516,7 +1897,9 @@
   <plugin name="bad-behavior">
     <vulnerability>
       <title>Bad Behavior &lt;= 2.24 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112619/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112619/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1524,7 +1907,9 @@
   <plugin name="bulletproof-security">
     <vulnerability>
       <title>BulletProof Security &lt;= 0.47 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112618/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112618/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1532,21 +1917,27 @@
   <plugin name="better-wp-security">
     <vulnerability>
       <title>Better WP Security &lt;= 3.5.3 Stored XSS</title>
-      <reference>https://github.com/wpscanteam/wpscan/issues/251</reference>
-      <reference>http://www.securityfocus.com/archive/1/527634/30/0/threaded</reference>
-      <reference>http://osvdb.org/95884</reference>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/issues/251</url>
+        <url>http://www.securityfocus.com/archive/1/527634/30/0/threaded</url>
+        <osvdb>95884</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>3.5.4</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>Better WP Security v3.4.3 Multiple XSS</title>
-      <reference>http://seclists.org/bugtraq/2012/Oct/9</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2012/Oct/9</url>
+      </references>
       <type>XSS</type>
       <fixed_in>3.4.4</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>Better WP Security &lt;= 3.2.4 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112617/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112617/</url>
+      </references>
       <type>XSS</type>
       <fixed_in>3.2.5</fixed_in>
     </vulnerability>
@@ -1555,7 +1946,9 @@
   <plugin name="custom-contact-forms">
     <vulnerability>
       <title>Custom Contact Forms &lt;= 5.0.0.1 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112616/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112616/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1563,12 +1956,16 @@
   <plugin name="2-click-socialmedia-button">
     <vulnerability>
       <title>2-Click-Socialmedia-Buttons &lt;= 0.34 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112615/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112615/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>2-Click-Socialmedia-Buttons &lt;= 0.32.2 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112711/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112711/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1576,13 +1973,17 @@
   <plugin name="login-with-ajax">
     <vulnerability>
       <title>Login With Ajax plugin Cross Site Scripting</title>
-      <reference>http://secunia.com/advisories/49013/</reference>
+      <references>
+        <secunia>49013</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>3.0.4.1</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress Login With Ajax Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/52950/</reference>
+      <references>
+        <secunia>52950</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>3.1</fixed_in>
     </vulnerability>
@@ -1591,12 +1992,16 @@
   <plugin name="media-library-categories">
     <vulnerability>
       <title>Media Library Categories plugin &lt;= 1.0.6 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17628/</reference>
+      <references>
+        <exploitdb>17628</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Media Library Categories plugin &lt;= 1.1.1 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112697/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112697/</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1604,7 +2009,9 @@
   <plugin name="deans-fckeditor-with-pwwangs-code-plugin-for-wordpress">
     <vulnerability>
       <title>FCKeditor Deans With Pwwangs Code &lt;= 1.0.0 Remote Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/111319/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/111319/</url>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -1612,24 +2019,32 @@
   <plugin name="zingiri-web-shop">
     <vulnerability>
       <title>WordPress Zingiri Web Shop Plugin Cookie SQL Injection Vulnerability</title>
-      <reference>http://secunia.com/advisories/49398/</reference>
+      <references>
+        <secunia>49398</secunia>
+      </references>
       <type>SQLI</type>
       <fixed_in>2.4.8</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>Zingiri Web Shop &lt;= 2.4.0 Multiple XSS Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/18787/</reference>
-      <reference>http://secunia.com/advisories/48991/</reference>
+      <references>
+        <exploitdb>18787</exploitdb>
+        <secunia>48991</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Zingiri Web Shop &lt;= 2.3.5 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112684/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112684/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Zingiri Web Shop 2.4.3 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/113668/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113668/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1637,7 +2052,10 @@
   <plugin name="organizer">
     <vulnerability>
       <title>Organizer 1.2.1 Cross Site Scripting / Path Disclosure</title>
-      <reference>http://packetstormsecurity.org/files/112086, http://packetstormsecurity.org/files/113800</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112086</url>
+        <url>http://packetstormsecurity.org/files/113800</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -1645,7 +2063,9 @@
   <plugin name="zingiri-tickets">
     <vulnerability>
       <title>Zingiri Tickets plugin File Disclosure</title>
-      <reference>http://packetstormsecurity.org/files/111904</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/111904</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1653,7 +2073,9 @@
   <plugin name="cms-tree-page-view">
     <vulnerability>
       <title>XSS vulnerability in CMS Tree Page View Plugin</title>
-      <reference>https://www.htbridge.com/advisory/HTB23083</reference>
+      <references>
+        <url>https://www.htbridge.com/advisory/HTB23083</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1661,7 +2083,9 @@
   <plugin name="all-in-one-event-calendar">
     <vulnerability>
       <title>Multiple XSS vulnerabilities in All-in-One Event Calendar for WordPress</title>
-      <reference>http://seclists.org/bugtraq/2012/Apr/70</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2012/Apr/70</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1669,7 +2093,9 @@
   <plugin name="buddypress">
     <vulnerability>
       <title>Buddypress &lt;= 1.5.5 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/18690/</reference>
+      <references>
+        <exploitdb>18690</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1677,7 +2103,9 @@
   <plugin name="register-plus-redux">
     <vulnerability>
       <title>Register Plus Redux &lt;= 3.8.3 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/111367</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/111367</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1685,7 +2113,9 @@
   <plugin name="magn-html5-drag-and-drop-media-uploader">
     <vulnerability>
       <title>Magn WP Drag and Drop &lt;= 1.1.4 Upload Shell Upload Vulnerability</title>
-      <reference>http://packetstormsecurity.org/files/110103</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/110103</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -1693,7 +2123,9 @@
   <plugin name="kish-guest-posting">
     <vulnerability>
       <title>Kish Guest Posting 1.0 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/18412/</reference>
+      <references>
+        <exploitdb>18412</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -1701,12 +2133,16 @@
   <plugin name="allwebmenus-wordpress-menu-plugin">
     <vulnerability>
       <title>AllWebMenus Shell Upload &lt;= 1.1.9 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/108946/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/108946/</url>
+      </references>
       <type>RFI</type>
     </vulnerability>
     <vulnerability>
       <title>AllWebMenus 1.1.3 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17861/</reference>
+      <references>
+        <exploitdb>17861</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -1714,7 +2150,9 @@
   <plugin name="shortcode-redirect">
     <vulnerability>
       <title>Shortcode Redirect &lt;= 1.0.01 Stored Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/108914/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/108914/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1722,7 +2160,9 @@
   <plugin name="ucan-post">
     <vulnerability>
       <title>uCan Post plugin &lt;= 1.0.09 Stored XSS</title>
-      <reference>http://www.exploit-db.com/exploits/18390/</reference>
+      <references>
+        <exploitdb>18390</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1730,7 +2170,9 @@
   <plugin name="wp-cycle-playlist">
     <vulnerability>
       <title>WP Cycle Playlist plugin Multiple Vulnerabilities</title>
-      <reference>http://1337day.com/exploits/17396</reference>
+      <references>
+        <url>http://1337day.com/exploits/17396</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -1738,7 +2180,9 @@
   <plugin name="myeasybackup">
     <vulnerability>
       <title>myEASYbackup 1.0.8.1 Directory Traversal</title>
-      <reference>http://packetstormsecurity.org/files/108711</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/108711</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -1746,27 +2190,37 @@
   <plugin name="count-per-day">
     <vulnerability>
       <title>Count per Day Plugin 3.2.5 (counter.php) - XSS Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/24859/</reference>
+      <references>
+        <exploitdb>24859</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Count Per Day 3.2.3 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/115904</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/115904</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Count Per Day 3.1.1 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/114787/SSCHADV2012-015.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114787/SSCHADV2012-015.txt</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Count Per Day plugin &lt;= 3.1.1 Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/18355/</reference>
+      <references>
+        <exploitdb>18355</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>Count per Day plugin &lt;= 2.17 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17857/</reference>
+      <references>
+        <exploitdb>17857</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1774,7 +2228,9 @@
   <plugin name="wp-autoyoutube">
     <vulnerability>
       <title>WP-AutoYoutube plugin &lt;= 0.1 Blind SQL Injection Vulnerability</title>
-      <reference>http://1337day.com/exploits/17368</reference>
+      <references>
+        <url>http://1337day.com/exploits/17368</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1782,7 +2238,9 @@
   <plugin name="age-verification">
     <vulnerability>
       <title>Age Verification plugin &lt;= 0.4 Open Redirect</title>
-      <reference>http://www.exploit-db.com/exploits/18350</reference>
+      <references>
+        <exploitdb>18350</exploitdb>
+      </references>
       <type>REDIRECT</type>
     </vulnerability>
   </plugin>
@@ -1790,7 +2248,9 @@
   <plugin name="yousaytoo-auto-publishing-plugin">
     <vulnerability>
       <title>Yousaytoo Auto Publishing &lt;= 1.0 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/108470</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/108470</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1798,7 +2258,9 @@
   <plugin name="pay-with-tweet">
     <vulnerability>
       <title>Pay With Tweet plugin &lt;= 1.1 Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/18330/</reference>
+      <references>
+        <exploitdb>18330</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -1806,7 +2268,9 @@
   <plugin name="wp-whois">
     <vulnerability>
       <title>Whois Search &lt;= 1.4.2 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/108271</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/108271</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1814,7 +2278,9 @@
   <plugin name="upm-polls">
     <vulnerability>
       <title>BLIND SQL injection UPM-POLLS plugin 1.0.4</title>
-      <reference>http://www.exploit-db.com/exploits/18231/</reference>
+      <references>
+        <exploitdb>18231</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1822,7 +2288,9 @@
   <plugin name="disqus-comment-system">
     <vulnerability>
       <title>Disqus Comment System &lt;= 2.68 Reflected Cross-Site Scripting (XSS)</title>
-      <reference>http://www.ethicalhack3r.co.uk/security/wordpress-plugin-disqus-comment-system-xss/</reference>
+      <references>
+        <url>http://www.ethicalhack3r.co.uk/security/wordpress-plugin-disqus-comment-system-xss/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1830,7 +2298,9 @@
   <plugin name="wp-recaptcha">
     <vulnerability>
       <title>Google reCAPTCHA &lt;= 3.1.3 Reflected XSS Vulnerability</title>
-      <reference>http://security-sh3ll.blogspot.com/2011/12/google-recaptcha-wordpress-plugin.html</reference>
+      <references>
+        <url>http://security-sh3ll.blogspot.com/2011/12/google-recaptcha-wordpress-plugin.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1838,7 +2308,9 @@
   <plugin name="link-library">
     <vulnerability>
       <title>Link Library plugin &lt;= 5.2.1 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/17887/</reference>
+      <references>
+        <exploitdb>17887</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1846,7 +2318,9 @@
   <plugin name="cevhershare">
     <vulnerability>
       <title>CevherShare 2.0 plugin SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17891/</reference>
+      <references>
+        <exploitdb>17891</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1854,7 +2328,9 @@
   <plugin name="meenews">
     <vulnerability>
       <title>meenews 5.1 plugin Cross-Site Scripting Vulnerabilities</title>
-      <reference>http://seclists.org/bugtraq/2011/Nov/151</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2011/Nov/151</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1862,7 +2338,9 @@
   <plugin name="clickdesk-live-support-chat">
     <vulnerability>
       <title>Click Desk Live Support Chat Cross Site Scripting Vulnerability</title>
-      <reference>http://seclists.org/bugtraq/2011/Nov/148</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2011/Nov/148</url>
+      </references>
       <type>XSS</type>
       <fixed_in>2.0</fixed_in>
     </vulnerability>
@@ -1871,7 +2349,9 @@
   <plugin name="adminimize">
     <vulnerability>
       <title>adminimize 1.7.21 Cross-Site Scripting Vulnerabilities</title>
-      <reference>http://seclists.org/bugtraq/2011/Nov/135</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2011/Nov/135</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1879,7 +2359,9 @@
   <plugin name="advanced-text-widget">
     <vulnerability>
       <title>Advanced Text Widget &lt;= 2.0.0 Cross Site Scripting Vulnerability</title>
-      <reference>http://seclists.org/bugtraq/2011/Nov/133</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2011/Nov/133</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -1887,7 +2369,9 @@
   <plugin name="mm-duplicate">
     <vulnerability>
       <title>MM Duplicate plugin &lt;= 1.2 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17707/</reference>
+      <references>
+        <exploitdb>17707</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1895,7 +2379,9 @@
   <plugin name="wp-menu-creator">
     <vulnerability>
       <title>Menu Creator plugin &lt;= 1.1.7 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17689/</reference>
+      <references>
+        <exploitdb>17689</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1903,7 +2389,9 @@
   <plugin name="allow-php-in-posts-and-pages">
     <vulnerability>
       <title>Allow PHP in Posts and Pages plugin &lt;= 2.0.0.RC1 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17688/</reference>
+      <references>
+        <exploitdb>17688</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1911,7 +2399,9 @@
   <plugin name="global-content-blocks">
     <vulnerability>
       <title>Global Content Blocks plugin &lt;= 1.2 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17687/</reference>
+      <references>
+        <exploitdb>17687</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1919,7 +2409,9 @@
   <plugin name="ajaxgallery">
     <vulnerability>
       <title>Ajax Gallery plugin &lt;= 3.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17686/</reference>
+      <references>
+        <exploitdb>17686</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1927,7 +2419,9 @@
   <plugin name="wp-ds-faq">
     <vulnerability>
       <title>WP DS FAQ plugin &lt;= 1.3.2 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17683/</reference>
+      <references>
+        <exploitdb>17683</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1935,7 +2429,9 @@
   <plugin name="odihost-newsletter-plugin">
     <vulnerability>
       <title>OdiHost Newsletter plugin &lt;= 1.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17681/</reference>
+      <references>
+        <exploitdb>17681</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1943,7 +2439,9 @@
   <plugin name="easy-contact-form-lite">
     <vulnerability>
       <title>Easy Contact Form Lite plugin &lt;= 1.0.7 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17680/</reference>
+      <references>
+        <exploitdb>17680</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1951,24 +2449,32 @@
   <plugin name="wp-symposium">
     <vulnerability>
       <title>WP Symposium plugin &lt;= 0.64 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17679/</reference>
+      <references>
+        <exploitdb>17679</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WP Symposium plugin &lt;= 12.12 Multiple SQL Injection Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50674/</reference>
-      <reference>http://ceriksen.com/2013/02/18/wp-symposium-multiple-sql-injection/</reference>
+      <references>
+        <secunia>50674</secunia>
+        <url>http://ceriksen.com/2013/02/18/wp-symposium-multiple-sql-injection/</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress WP Symposium Plugin &quot;u&quot; XSS</title>
-      <reference>http://secunia.com/advisories/52864/</reference>
+      <references>
+        <secunia>52864</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>13.04</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress WP Symposium Plugin &quot;u&quot; Redirection Weakness</title>
-      <reference>http://secunia.com/advisories/52925/</reference>
+      <references>
+        <secunia>52925</secunia>
+      </references>
       <type>REDIRECT</type>
     </vulnerability>
   </plugin>
@@ -1976,7 +2482,9 @@
   <plugin name="file-groups">
     <vulnerability>
       <title>File Groups plugin &lt;= 1.1.2 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17677/</reference>
+      <references>
+        <exploitdb>17677</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1984,7 +2492,9 @@
   <plugin name="ip-logger">
     <vulnerability>
       <title>IP-Logger plugin &lt;= 3.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17673/</reference>
+      <references>
+        <exploitdb>17673</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -1992,7 +2502,9 @@
   <plugin name="beer-recipes">
     <vulnerability>
       <title>Beer Recipes v.1.0 XSS</title>
-      <reference>http://www.exploit-db.com/exploits/17453/</reference>
+      <references>
+        <exploitdb>17453</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2000,7 +2512,9 @@
   <plugin name="is-human">
     <vulnerability>
       <title>Is-human &lt;=1.4.2 Remote Command Execution Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17299/</reference>
+      <references>
+        <exploitdb>17299</exploitdb>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </plugin>
@@ -2008,7 +2522,9 @@
   <plugin name="editormonkey">
     <vulnerability>
       <title>EditorMonkey plugin (FCKeditor) Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/17284/</reference>
+      <references>
+        <exploitdb>17284</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -2016,7 +2532,9 @@
   <plugin name="sermon-browser">
     <vulnerability>
       <title>SermonBrowser 0.43 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/17214/</reference>
+      <references>
+        <exploitdb>17214</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2024,7 +2542,9 @@
   <plugin name="ajax-category-dropdown">
     <vulnerability>
       <title>Ajax Category Dropdown 0.1.5 Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/17207/</reference>
+      <references>
+        <exploitdb>17207</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2032,7 +2552,9 @@
   <plugin name="wp-custom-pages">
     <vulnerability>
       <title>WP Custom Pages 0.5.0.1 LFI Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17119/</reference>
+      <references>
+        <exploitdb>17119</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
   </plugin>
@@ -2040,46 +2562,62 @@
   <plugin name="flash-album-gallery">
     <vulnerability>
       <title>WordPress GRAND FlAGallery Plugin Multiple Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/51100/</reference>
+      <references>
+        <secunia>51100</secunia>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>GRAND Flash Album Gallery 1.9.0 and 2.0.0 Multiple Vulnerabilities</title>
-      <reference>http://packetstormsecurity.org/files/117665/</reference>
-      <reference>http://www.waraxe.us/advisory-94.html</reference>
-      <reference>http://secunia.com/advisories/51601/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/117665/</url>
+        <url>http://www.waraxe.us/advisory-94.html</url>
+        <secunia>51601</secunia>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>GRAND Flash Album Gallery 0.55 Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/16947/</reference>
+      <references>
+        <exploitdb>16947</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>GRAND Flash Album Gallery &lt;= 1.56 XSS Vulnerability</title>
-      <reference>http://seclists.org/bugtraq/2011/Nov/186</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2011/Nov/186</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>GRAND Flash Album Gallery &lt;= 1.71 XSS Vulnerability</title>
-      <reference>http://packetstormsecurity.org/files/112704</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112704</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress GRAND FlAGallery Plugin "gid" SQL Injection Vulnerability</title>
-      <reference>http://secunia.com/advisories/53356/</reference>
+      <references>
+        <secunia>53356</secunia>
+      </references>
       <type>SQLI</type>
       <fixed_in>2.56</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>GRAND FlAGallery Plugin "s" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53111/</reference>
-      <reference>http://osvdb.org/93714</reference>
+      <references>
+        <secunia>53111</secunia>
+        <osvdb>93714</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>2.72</fixed_in>
     </vulnerability>
@@ -2088,7 +2626,9 @@
   <plugin name="php_speedy_wp">
     <vulnerability>
       <title>PHP Speedy &lt;= 0.5.2 (admin_container.php) Remote Code Exec Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/16273/</reference>
+      <references>
+        <exploitdb>16273</exploitdb>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </plugin>
@@ -2096,7 +2636,9 @@
   <plugin name="old-post-spinner">
     <vulnerability>
       <title>OPS Old Post Spinner 2.2.1 LFI Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/16251/</reference>
+      <references>
+        <exploitdb>16251</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
   </plugin>
@@ -2104,7 +2646,9 @@
   <plugin name="jquery-mega-menu">
     <vulnerability>
       <title>jQuery Mega Menu 1.0 Local File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/16250/</reference>
+      <references>
+        <exploitdb>16250</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
   </plugin>
@@ -2112,7 +2656,9 @@
   <plugin name="iwant-one-ihave-one">
     <vulnerability>
       <title>IWantOneButton 3.0.1 Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/16236/</reference>
+      <references>
+        <exploitdb>16236</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2120,17 +2666,23 @@
   <plugin name="forum-server">
     <vulnerability>
       <title>WP Forum Server 1.6.5 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/16235/</reference>
+      <references>
+        <exploitdb>16235</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WP Forum Server plugin &lt;= 1.7 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17828/</reference>
+      <references>
+        <exploitdb>17828</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WP Forum Server plugin &lt;= 1.7.3 SQL Injection / XSS Vulnerabilities</title>
-      <reference>http://www.packetstormsecurity.org/files/112703</reference>
+      <references>
+        <url>http://www.packetstormsecurity.org/files/112703</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2138,7 +2690,9 @@
   <plugin name="relevanssi">
     <vulnerability>
       <title>Relevanssi 2.7.2 Stored XSS Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/16233/</reference>
+      <references>
+        <exploitdb>16233</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -2146,7 +2700,9 @@
   <plugin name="gigpress">
     <vulnerability>
       <title>GigPress 2.1.10 Stored XSS Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/16232/</reference>
+      <references>
+        <exploitdb>16232</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -2154,12 +2710,16 @@
   <plugin name="comment-rating">
     <vulnerability>
       <title>WordPress Comment Rating 2.9.32 SQL Injection / Bypass</title>
-      <reference>http://packetstormsecurity.com/files/120569/wpcomment2932-sqlbypass.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/120569/wpcomment2932-sqlbypass.txt</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>Comment Rating 2.9.23 Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/16221/</reference>
+      <references>
+        <exploitdb>16221</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2167,7 +2727,9 @@
   <plugin name="z-vote">
     <vulnerability>
       <title>Z-Vote 1.1 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/16218/</reference>
+      <references>
+        <exploitdb>16218</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2175,8 +2737,10 @@
   <plugin name="user-photo">
     <vulnerability>
       <title>User Photo Component Remote File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/16181/</reference>
-      <reference>http://osvdb.org/71071</reference>
+      <references>
+        <exploitdb>16181</exploitdb>
+        <osvdb>71071</osvdb>
+      </references>
       <type>UPLOAD</type>
       <fixed_in>0.9.5</fixed_in>
     </vulnerability>
@@ -2185,7 +2749,11 @@
   <plugin name="enable-media-replace">
     <vulnerability>
       <title>Enable Media Replace Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/16144/</reference>
+      <references>
+        <exploitdb>16144</exploitdb>
+      </references>
+
+
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2193,27 +2761,37 @@
   <plugin name="mingle-forum">
     <vulnerability>
       <title>Mingle Forum &lt;= 1.0.32.1 Cross Site Scripting / SQL Injection</title>
-      <reference>http://packetstormsecurity.org/files/108915/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/108915/</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>Mingle Forum plugin &lt;= 1.0.31 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17894/</reference>
+      <references>
+        <exploitdb>17894</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Mingle Forum (Plugin) &lt;= 1.0.26 Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/15943/</reference>
+      <references>
+        <exploitdb>15943</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>Mingle Forum &lt;= 1.0.33 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/112696/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/112696/</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>Mingle Forum 1.0.33.3 Multiple Parameter SQL Injection</title>
-      <reference>http://osvdb.org/90434</reference>
+      <references>
+        <osvdb>90434</osvdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2221,7 +2799,9 @@
   <plugin name="accept-signups">
     <vulnerability>
       <title>Accept Signups 0.1 XSS</title>
-      <reference>http://www.exploit-db.com/exploits/15808/</reference>
+      <references>
+        <exploitdb>15808</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -2229,7 +2809,9 @@
   <plugin name="events-manager-extended">
     <vulnerability>
       <title>Events Manager Extended Persistent XSS Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/14923/</reference>
+      <references>
+        <exploitdb>14923</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -2237,7 +2819,9 @@
   <plugin name="nextgen-smooth-gallery">
     <vulnerability>
       <title>NextGEN Smooth Gallery Blind SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/14541/</reference>
+      <references>
+        <exploitdb>14541</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2245,7 +2829,9 @@
   <plugin name="mylinksdump">
     <vulnerability>
       <title>myLDlinker SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/14441/</reference>
+      <references>
+        <exploitdb>14441</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2253,7 +2839,9 @@
   <plugin name="firestats">
     <vulnerability>
       <title>Firestats Remote Configuration File Download</title>
-      <reference>http://www.exploit-db.com/exploits/14308/</reference>
+      <references>
+        <exploitdb>14308</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -2261,7 +2849,9 @@
   <plugin name="simple-press">
     <vulnerability>
       <title>Simple:Press SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/14198/</reference>
+      <references>
+        <exploitdb>14198</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2269,7 +2859,9 @@
   <plugin name="cimy-counter">
     <vulnerability>
       <title>Vulnerabilities in Cimy Counter for WordPress</title>
-      <reference>http://www.exploit-db.com/exploits/14057/</reference>
+      <references>
+        <exploitdb>14057</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2277,27 +2869,35 @@
   <plugin name="nextgen-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
-      <reference>http://secunia.com/advisories/51271/</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+        <secunia>51271</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>1.9.8</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>XSS in NextGEN Gallery &lt;= 1.5.1</title>
-      <reference>http://www.exploit-db.com/exploits/12098/</reference>
+      <references>
+        <exploitdb>12098</exploitdb>
+      </references>
       <type>XSS</type>
       <fixed_in>1.5.2</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>swfupload.swf Multiple Cross Site Scripting Vulnerabilities</title>
-      <reference>http://www.securityfocus.com/bid/60433</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/60433</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>NextGEN Gallery 1.9.12 Arbitrary File Upload</title>
-      <reference>http://wordpress.org/plugins/nextgen-gallery/changelog/</reference>
-      <reference>http://osvdb.org/94232</reference>
-      <cve>2013-3684</cve>
+      <references>
+        <url>http://wordpress.org/plugins/nextgen-gallery/changelog/</url>
+        <osvdb>94232</osvdb>
+        <cve>2013-3684</cve>
+      </references>
       <type>UPLOAD</type>
       <fixed_in>1.9.13</fixed_in>
     </vulnerability>
@@ -2306,7 +2906,9 @@
   <plugin name="cpl">
     <vulnerability>
       <title>Copperleaf Photolog SQL injection</title>
-      <reference>http://www.exploit-db.com/exploits/11458/</reference>
+      <references>
+        <exploitdb>11458</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2314,14 +2916,18 @@
   <plugin name="events-calendar">
     <vulnerability>
       <title>Events SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/10929/</reference>
-      <reference>http://osvdb.org/95677</reference>
+      <references>
+        <exploitdb>10929</exploitdb>
+        <osvdb>95677</osvdb>
+      </references>
       <type>SQLI</type>
       <fixed_in>6.7.10</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WP Events Calendar wp-admin/admin.php EC_id Parameter XSS</title>
-      <reference>http://osvdb.org/74705</reference>
+      <references>
+        <osvdb>74705</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>6.7.12a</fixed_in>
     </vulnerability>
@@ -2330,7 +2936,9 @@
   <plugin name="ImageManager">
     <vulnerability>
       <title>Image Manager Plugins Shell Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/10325/</reference>
+      <references>
+        <exploitdb>10325</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -2338,12 +2946,16 @@
   <plugin name="wp-cumulus">
     <vulnerability>
       <title>Vulnerabilities in WP-Cumulus &lt;= 1.20 for WordPress</title>
-      <reference>http://www.exploit-db.com/exploits/10228/</reference>
+      <references>
+        <exploitdb>10228</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>WP-Cumulus Cross Site Scripting Vulnerabily</title>
-      <reference>http://seclists.org/fulldisclosure/2011/Nov/340</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2011/Nov/340</url>
+      </references>
       <type>XSS</type>
       <fixed_in>1.23</fixed_in>
     </vulnerability>
@@ -2352,7 +2964,9 @@
   <plugin name="wp-syntax">
     <vulnerability>
       <title>WP-Syntax &lt;= 0.9.1 Remote Command Execution</title>
-      <reference>http://www.exploit-db.com/exploits/9431/</reference>
+      <references>
+        <exploitdb>9431</exploitdb>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </plugin>
@@ -2360,7 +2974,9 @@
   <plugin name="my-category-order">
     <vulnerability>
       <title>My Category Order &lt;= 2.8 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/9150/</reference>
+      <references>
+        <exploitdb>9150</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2368,7 +2984,9 @@
   <plugin name="related-sites">
     <vulnerability>
       <title>Related Sites 2.1 Blind SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/9054/</reference>
+      <references>
+        <exploitdb>9054</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2376,17 +2994,23 @@
   <plugin name="dm-albums">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>DM Albums 1.9.2 Remote File Disclosure Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/9048/</reference>
+      <references>
+        <exploitdb>9048</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
     <vulnerability>
       <title>DM Albums 1.9.2 Remote File Inclusion Vuln</title>
-      <reference>http://www.exploit-db.com/exploits/9043/</reference>
+      <references>
+        <exploitdb>9043</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -2394,17 +3018,23 @@
   <plugin name="photoracer">
     <vulnerability>
       <title>Photoracer 1.0 (id) SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/8961/</reference>
+      <references>
+        <exploitdb>8961</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Photoracer plugin &lt;= 1.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17720/</reference>
+      <references>
+        <exploitdb>17720</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Photoracer plugin &lt;= 1.0 Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/17731/</reference>
+      <references>
+        <exploitdb>17731</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2412,7 +3042,9 @@
   <plugin name="wp-lytebox">
     <vulnerability>
       <title>Lytebox (wp-lytebox) Local File Inclusion Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/8791/</reference>
+      <references>
+        <exploitdb>8791</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
   </plugin>
@@ -2420,7 +3052,9 @@
   <plugin name="fmoblog">
     <vulnerability>
       <title>fMoblog 2.1 (id) SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/8229/</reference>
+      <references>
+        <exploitdb>8229</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2428,7 +3062,9 @@
   <plugin name="page-flip-image-gallery">
     <vulnerability>
       <title>Page Flip Image Gallery &lt;= 0.2.2 Remote FD Vuln</title>
-      <reference>http://www.exploit-db.com/exploits/7543/</reference>
+      <references>
+        <exploitdb>7543</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
   </plugin>
@@ -2436,7 +3072,9 @@
   <plugin name="wp-shopping-cart">
     <vulnerability>
       <title>e-Commerce &lt;= 3.4 Arbitrary File Upload Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/6867/</reference>
+      <references>
+        <exploitdb>6867</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -2444,7 +3082,9 @@
   <plugin name="downloads-manager">
     <vulnerability>
       <title>Download Manager 0.2 Arbitrary File Upload Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/6127/</reference>
+      <references>
+        <exploitdb>6127</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -2452,7 +3092,9 @@
   <plugin name="wpSS">
     <vulnerability>
       <title>Spreadsheet &lt;= 0.6 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/5486/</reference>
+      <references>
+        <exploitdb>5486</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2460,7 +3102,9 @@
   <plugin name="wp-download">
     <vulnerability>
       <title>Download (dl_id) SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/5326/</reference>
+      <references>
+        <exploitdb>5326</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2468,7 +3112,9 @@
   <plugin name="sniplets">
     <vulnerability>
       <title>Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/5194/</reference>
+      <references>
+        <exploitdb>5194</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2476,7 +3122,9 @@
   <plugin name="wp-photo-album">
     <vulnerability>
       <title>Photo album Remote SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/5135/</reference>
+      <references>
+        <exploitdb>5135</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2484,12 +3132,16 @@
   <plugin name="sf-forum">
     <vulnerability>
       <title>Simple Forum 2.0-2.1 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/5126/</reference>
+      <references>
+        <exploitdb>5126</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Simple Forum 1.10-1.11 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/5127/</reference>
+      <references>
+        <exploitdb>5127</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2497,12 +3149,16 @@
   <plugin name="st_newsletter">
     <vulnerability>
       <title>st_newsletter Remote SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/5053/</reference>
+      <references>
+        <exploitdb>5053</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>st_newsletter (stnl_iframe.php) SQL Injection Vuln</title>
-      <reference>http://www.exploit-db.com/exploits/6777/</reference>
+      <references>
+        <exploitdb>6777</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2510,7 +3166,9 @@
   <plugin name="wordspew">
     <vulnerability>
       <title>Wordspew Remote SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/5039/</reference>
+      <references>
+        <exploitdb>5039</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2518,7 +3176,9 @@
   <plugin name="dmsguestbook">
     <vulnerability>
       <title>dmsguestbook 1.7.0 Multiple Remote Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/5035/</reference>
+      <references>
+        <exploitdb>5035</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2526,7 +3186,9 @@
   <plugin name="wassup">
     <vulnerability>
       <title>WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/5017/</reference>
+      <references>
+        <exploitdb>5017</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2534,7 +3196,9 @@
   <plugin name="wp-adserve">
     <vulnerability>
       <title>Adserve 0.2 adclick.php SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/5013/</reference>
+      <references>
+        <exploitdb>5013</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2542,7 +3206,9 @@
   <plugin name="fgallery">
     <vulnerability>
       <title>plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/4993/</reference>
+      <references>
+        <exploitdb>4993</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2550,7 +3216,9 @@
   <plugin name="wp-cal">
     <vulnerability>
       <title>WP-Cal 0.3 editevent.php SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/4992/</reference>
+      <references>
+        <exploitdb>4992</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2558,12 +3226,16 @@
   <plugin name="wpforum">
     <vulnerability>
       <title>plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/4939/</reference>
+      <references>
+        <exploitdb>4939</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/7738/</reference>
+      <references>
+        <exploitdb>7738</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2571,12 +3243,16 @@
   <plugin name="wp-filemanager">
     <vulnerability>
       <title>Wp-FileManager 1.2 Remote Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/4844/</reference>
+      <references>
+        <exploitdb>4844</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress wp-FileManager File Download Vulnerability</title>
-      <reference>http://secunia.com/advisories/53421/</reference>
+      <references>
+        <secunia>53421</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>1.4.0</fixed_in>
     </vulnerability>
@@ -2585,7 +3261,9 @@
   <plugin name="pictpress">
     <vulnerability>
       <title>PictPress &lt;= 0.91 Remote File Disclosure Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/4695/</reference>
+      <references>
+        <exploitdb>4695</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
   </plugin>
@@ -2593,7 +3271,9 @@
   <plugin name="backupwordpress">
     <vulnerability>
       <title>BackUp &lt;= 0.4.2b RFI Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/4593/</reference>
+      <references>
+        <exploitdb>4593</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -2601,7 +3281,9 @@
   <plugin name="myflash">
     <vulnerability>
       <title>plugin myflash &lt;= 1.00 (wppath) RFI Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/3828/</reference>
+      <references>
+        <exploitdb>3828</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -2609,7 +3291,9 @@
   <plugin name="wordtube">
     <vulnerability>
       <title>plugin wordTube &lt;= 1.43 (wpPATH) RFI Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/3825/</reference>
+      <references>
+        <exploitdb>3825</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -2617,7 +3301,9 @@
   <plugin name="wp-table">
     <vulnerability>
       <title>plugin wp-Table &lt;= 1.43 (inc_dir) RFI Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/3824/</reference>
+      <references>
+        <exploitdb>3824</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -2625,7 +3311,9 @@
   <plugin name="mygallery">
     <vulnerability>
       <title>myGallery &lt;= 1.4b4 Remote File Inclusion Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/3814/</reference>
+      <references>
+        <exploitdb>3814</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -2633,7 +3321,9 @@
   <plugin name="sendit">
     <vulnerability>
       <title>SendIt plugin &lt;= 1.5.9 Blind SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17716/</reference>
+      <references>
+        <exploitdb>17716</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2641,7 +3331,9 @@
   <plugin name="js-appointment">
     <vulnerability>
       <title>Js-appointment plugin &lt;= 1.5 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17724/</reference>
+      <references>
+        <exploitdb>17724</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2649,12 +3341,16 @@
   <plugin name="mm-forms-community">
     <vulnerability>
       <title>MM Forms Community &lt;= 1.2.3 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17725/</reference>
+      <references>
+        <exploitdb>17725</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>MM Forms Community 2.2.6 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/18997/</reference>
+      <references>
+        <exploitdb>18997</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -2662,7 +3358,9 @@
   <plugin name="super-captcha">
     <vulnerability>
       <title>Super CAPTCHA plugin &lt;= 2.2.4 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17728/</reference>
+      <references>
+        <exploitdb>17728</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2670,7 +3368,9 @@
   <plugin name="collision-testimonials">
     <vulnerability>
       <title>Collision Testimonials plugin &lt;= 3.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17729/</reference>
+      <references>
+        <exploitdb>17729</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2678,7 +3378,9 @@
   <plugin name="oqey-headers">
     <vulnerability>
       <title>Oqey Headers plugin &lt;= 0.3 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17730/</reference>
+      <references>
+        <exploitdb>17730</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2686,7 +3388,9 @@
   <plugin name="fbpromotions">
     <vulnerability>
       <title>Facebook Promotions plugin &lt;= 1.3.3 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17737/</reference>
+      <references>
+        <exploitdb>17737</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2694,12 +3398,16 @@
   <plugin name="evarisk">
     <vulnerability>
       <title>Evarisk plugin &lt;= 5.1.3.6 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17738/</reference>
+      <references>
+        <exploitdb>17738</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Evarisk 5.1.5.4 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/113638/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113638/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -2707,7 +3415,9 @@
   <plugin name="profiles">
     <vulnerability>
       <title>Profiles plugin &lt;= 2.0 RC1 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17739/</reference>
+      <references>
+        <exploitdb>17739</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2715,7 +3425,9 @@
   <plugin name="mystat">
     <vulnerability>
       <title>mySTAT plugin &lt;= 2.6 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17740/</reference>
+      <references>
+        <exploitdb>17740</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2723,7 +3435,9 @@
   <plugin name="sh-slideshow">
     <vulnerability>
       <title>SH Slideshow plugin &lt;= 3.1.4 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17748/</reference>
+      <references>
+        <exploitdb>17748</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2731,7 +3445,9 @@
   <plugin name="copyright-licensing-tools">
     <vulnerability>
       <title>iCopyright(R) Article Tools plugin &lt;= 1.1.4 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17749/</reference>
+      <references>
+        <exploitdb>17749</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2739,7 +3455,9 @@
   <plugin name="advertizer">
     <vulnerability>
       <title>Advertizer plugin &lt;= 1.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17750/</reference>
+      <references>
+        <exploitdb>17750</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2747,17 +3465,23 @@
   <plugin name="event-registration">
     <vulnerability>
       <title>Event Registration plugin &lt;= 5.44 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17814/</reference>
+      <references>
+        <exploitdb>17814</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Event Registration plugin &lt;= 5.43 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17751/</reference>
+      <references>
+        <exploitdb>17751</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Event Registration 5.32 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/15513/</reference>
+      <references>
+        <exploitdb>15513</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2765,7 +3489,9 @@
   <plugin name="crawlrate-tracker">
     <vulnerability>
       <title>Craw Rate Tracker plugin &lt;= 2.0.2 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17755/</reference>
+      <references>
+        <exploitdb>17755</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2773,7 +3499,9 @@
   <plugin name="wp-audio-gallery-playlist">
     <vulnerability>
       <title>wp audio gallery playlist plugin &lt;= 0.12 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17756/</reference>
+      <references>
+        <exploitdb>17756</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2781,13 +3509,17 @@
   <plugin name="yolink-search">
     <vulnerability>
       <title>WordPress yolink Search Plugin "s" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/52030/</reference>
+      <references>
+        <secunia>52030</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>2.6</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>yolink Search plugin &lt;= 1.1.4 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17757/</reference>
+      <references>
+        <exploitdb>17757</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2795,7 +3527,9 @@
   <plugin name="pure-html">
     <vulnerability>
       <title>PureHTML plugin &lt;= 1.0.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17758/</reference>
+      <references>
+        <exploitdb>17758</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2803,7 +3537,9 @@
   <plugin name="couponer">
     <vulnerability>
       <title>Couponer plugin &lt;= 1.2 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17759/</reference>
+      <references>
+        <exploitdb>17759</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2811,7 +3547,9 @@
   <plugin name="grapefile">
     <vulnerability>
       <title>grapefile plugin &lt;= 1.1 Arbitrary File Upload</title>
-      <reference>http://www.exploit-db.com/exploits/17760/</reference>
+      <references>
+        <exploitdb>17760</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -2819,7 +3557,9 @@
   <plugin name="image-gallery-with-slideshow">
     <vulnerability>
       <title>image-gallery-with-slideshow plugin &lt;= 1.5 Arbitrary File Upload / SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/17761/</reference>
+      <references>
+        <exploitdb>17761</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -2827,7 +3567,9 @@
   <plugin name="wordpress-donation-plugin-with-goals-and-paypal-ipn-by-nonprofitcmsorg">
     <vulnerability>
       <title>Donation plugin &lt;= 1.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17763/</reference>
+      <references>
+        <exploitdb>17763</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2835,12 +3577,16 @@
   <plugin name="wp-bannerize">
     <vulnerability>
       <title>WP Bannerize plugin &lt;= 2.8.6 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17764/</reference>
+      <references>
+        <exploitdb>17764</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WP Bannerize plugin &lt;= 2.8.7 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17906/</reference>
+      <references>
+        <exploitdb>17906</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2848,7 +3594,9 @@
   <plugin name="search-autocomplete">
     <vulnerability>
       <title>SearchAutocomplete plugin &lt;= 1.0.8 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17767/</reference>
+      <references>
+        <exploitdb>17767</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2856,7 +3604,9 @@
   <plugin name="videowhisper-video-presentation">
     <vulnerability>
       <title>VideoWhisper Video Presentation plugin &lt;= 1.1 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17771/</reference>
+      <references>
+        <exploitdb>17771</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2864,7 +3614,9 @@
   <plugin name="facebook-opengraph-meta-plugin">
     <vulnerability>
       <title>Facebook Opengraph Meta plugin &lt;= 1.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17773/</reference>
+      <references>
+        <exploitdb>17773</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2872,7 +3624,9 @@
   <plugin name="zotpress">
     <vulnerability>
       <title>Zotpress plugin &lt;= 4.4 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17778/</reference>
+      <references>
+        <exploitdb>17778</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2880,7 +3634,9 @@
   <plugin name="oqey-gallery">
     <vulnerability>
       <title>oQey Gallery plugin &lt;= 0.4.8 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17779/</reference>
+      <references>
+        <exploitdb>17779</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2888,7 +3644,9 @@
   <plugin name="tweet-old-post">
     <vulnerability>
       <title>Tweet Old Post plugin &lt;= 3.2.5 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17789/</reference>
+      <references>
+        <exploitdb>17789</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2896,7 +3654,9 @@
   <plugin name="post-highlights">
     <vulnerability>
       <title>post highlights plugin &lt;= 2.2 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17790/</reference>
+      <references>
+        <exploitdb>17790</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2904,7 +3664,9 @@
   <plugin name="knr-author-list-widget">
     <vulnerability>
       <title>KNR Author List Widget plugin &lt;= 2.0.0 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17791/</reference>
+      <references>
+        <exploitdb>17791</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2912,7 +3674,9 @@
   <plugin name="scormcloud">
     <vulnerability>
       <title>SCORM Cloud plugin &lt;= 1.0.6.6 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17793/</reference>
+      <references>
+        <exploitdb>17793</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2920,7 +3684,9 @@
   <plugin name="eventify">
     <vulnerability>
       <title>Eventify - Simple Events plugin &lt;= 1.7.f SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17794/</reference>
+      <references>
+        <exploitdb>17794</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2928,7 +3694,9 @@
   <plugin name="paid-downloads">
     <vulnerability>
       <title>Paid Downloads plugin &lt;= 2.01 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17797/</reference>
+      <references>
+        <exploitdb>17797</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2936,7 +3704,9 @@
   <plugin name="community-events">
     <vulnerability>
       <title>Community Events plugin &lt;= 1.2.1 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17798/</reference>
+      <references>
+        <exploitdb>17798</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2944,12 +3714,16 @@
   <plugin name="1-flash-gallery">
     <vulnerability>
       <title>1-flash-gallery &lt;= 1.9.0 XSS in ZeroClipboard.swf</title>
-      <reference>http://1337day.com/exploit/20396</reference>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>1 Flash Gallery Arbiraty File Upload Exploit (MSF)</title>
-      <reference>http://www.exploit-db.com/exploits/17801/</reference>
+      <references>
+        <exploitdb>17801</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -2957,12 +3731,16 @@
   <plugin name="wp-filebase">
     <vulnerability>
       <title>WP-Filebase Download Manager plugin &lt;= 0.2.9 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17808/</reference>
+      <references>
+        <exploitdb>17808</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress WP-Filebase Plugin Unspecified Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/51269/</reference>
+      <references>
+        <secunia>51269</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>0.2.9.25</fixed_in>
     </vulnerability>
@@ -2971,7 +3749,9 @@
   <plugin name="a-to-z-category-listing">
     <vulnerability>
       <title>A to Z Category Listing plugin &lt;= 1.3 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17809/</reference>
+      <references>
+        <exploitdb>17809</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -2979,12 +3759,16 @@
   <plugin name="wp-e-commerce">
     <vulnerability>
       <title>WP e-Commerce plugin &lt;= 3.8.6 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17832/</reference>
+      <references>
+        <exploitdb>17832</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WP-e-Commerce plugin v3.8.9.5 Cross Site Scripting Vulnerability</title>
-      <reference>http://1337day.com/exploit/20517</reference>
+      <references>
+        <url>http://1337day.com/exploit/20517</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -2992,7 +3776,9 @@
   <plugin name="filedownload">
     <vulnerability>
       <title>Filedownload 0.1 (download.php) Remote File Disclosure Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17858/</reference>
+      <references>
+        <exploitdb>17858</exploitdb>
+      </references>
       <type>LFI</type>
     </vulnerability>
   </plugin>
@@ -3000,12 +3786,16 @@
   <plugin name="thecartpress">
     <vulnerability>
       <title>TheCartPress &lt;= 1.6 Cross Site Sripting</title>
-      <reference>http://packetstormsecurity.org/files/108272/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/108272/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>TheCartPress 1.1.1 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17860/</reference>
+      <references>
+        <exploitdb>17860</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -3013,7 +3803,9 @@
   <plugin name="wpeasystats">
     <vulnerability>
       <title>WPEasyStats 1.8 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17862/</reference>
+      <references>
+        <exploitdb>17862</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -3021,7 +3813,9 @@
   <plugin name="annonces">
     <vulnerability>
       <title>Annonces 1.2.0.0 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17863/</reference>
+      <references>
+        <exploitdb>17863</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -3029,7 +3823,9 @@
   <plugin name="livesig">
     <vulnerability>
       <title>Livesig 0.4 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17864/</reference>
+      <references>
+        <exploitdb>17864</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -3037,7 +3833,9 @@
   <plugin name="disclosure-policy-plugin">
     <vulnerability>
       <title>Disclosure Policy 1.0 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17865/</reference>
+      <references>
+        <exploitdb>17865</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -3045,12 +3843,16 @@
   <plugin name="mailz">
     <vulnerability>
       <title>Mailing List 1.3.2 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17866/</reference>
+      <references>
+        <exploitdb>17866</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
     <vulnerability>
       <title>Mailing List Arbitrary file download</title>
-      <reference>http://www.exploit-db.com/exploits/18276/</reference>
+      <references>
+        <exploitdb>18276</exploitdb>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>1.4.1</fixed_in>
     </vulnerability>
@@ -3059,12 +3861,16 @@
   <plugin name="g-web-shop">
     <vulnerability>
       <title>Zingiri Web Shop 2.2.0 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17867/</reference>
+      <references>
+        <exploitdb>17867</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
     <vulnerability>
       <title>Zingiri Web Shop &lt;= 2.2.3 Remote Code Execution</title>
-      <reference>http://www.exploit-db.com/exploits/18111/</reference>
+      <references>
+        <exploitdb>18111</exploitdb>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </plugin>
@@ -3072,12 +3878,16 @@
   <plugin name="mini-mail-dashboard-widget">
     <vulnerability>
       <title>Mini Mail Dashboard Widget 1.36 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17868/</reference>
+      <references>
+        <exploitdb>17868</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
     <vulnerability>
       <title>Mini Mail Dashboard Widget 1.42 Stored XSS</title>
-      <reference>http://www.exploit-db.com/exploits/20358/</reference>
+      <references>
+        <exploitdb>20358</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3085,7 +3895,9 @@
   <plugin name="relocate-upload">
     <vulnerability>
       <title>Relocate Upload 0.14 Remote File Inclusion</title>
-      <reference>http://www.exploit-db.com/exploits/17869/</reference>
+      <references>
+        <exploitdb>17869</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -3093,12 +3905,16 @@
   <plugin name="category-grid-view-gallery">
     <vulnerability>
       <title>Category Grid View Gallery plugin 0.1.1 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
-      <title> Category Grid View Gallery CatGridPost.php ID Parameter XSS</title>
-      <reference>http://osvdb.org/94805</reference>
+      <title>Category Grid View Gallery CatGridPost.php ID Parameter XSS</title>
+      <references>
+        <osvdb>94805</osvdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3106,7 +3922,9 @@
   <plugin name="auto-attachments">
     <vulnerability>
       <title>Auto Attachments plugin 0.2.9 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3114,7 +3932,9 @@
   <plugin name="wp-marketplace">
     <vulnerability>
       <title>WP Marketplace plugin 1.1.0 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3122,7 +3942,9 @@
   <plugin name="dp-thumbnail">
     <vulnerability>
       <title>DP Thumbnail plugin 1.0 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3130,7 +3952,9 @@
   <plugin name="vk-gallery">
     <vulnerability>
       <title>Vk Gallery plugin 1.1.0 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3138,7 +3962,9 @@
   <plugin name="rekt-slideshow">
     <vulnerability>
       <title>Rekt Slideshow plugin 1.0.5 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3146,7 +3972,9 @@
   <plugin name="cac-featured-content">
     <vulnerability>
       <title>CAC Featured Content plugin 0.8 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3154,7 +3982,9 @@
   <plugin name="rent-a-car">
     <vulnerability>
       <title>Rent A Car plugin 1.0 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3162,7 +3992,9 @@
   <plugin name="lisl-last-image-slider">
     <vulnerability>
       <title>LISL Last Image Slider plugin 1.0 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3170,7 +4002,9 @@
   <plugin name="islidex">
     <vulnerability>
       <title>Islidex plugin 2.7 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3178,7 +4012,9 @@
   <plugin name="kino-gallery">
     <vulnerability>
       <title>Kino Gallery plugin 1.0 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3186,7 +4022,9 @@
   <plugin name="cms-pack-cache">
     <vulnerability>
       <title>Cms Pack plugin 1.3 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3194,7 +4032,9 @@
   <plugin name="a-gallery">
     <vulnerability>
       <title>A Gallery plugin 0.9 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3202,7 +4042,9 @@
   <plugin name="category-list-portfolio-page">
     <vulnerability>
       <title>Category List Portfolio Page plugin 0.9 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3210,7 +4052,9 @@
   <plugin name="really-easy-slider">
     <vulnerability>
       <title>Really Easy Slider plugin 0.1 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3218,7 +4062,9 @@
   <plugin name="verve-meta-boxes">
     <vulnerability>
       <title>Verve Meta Boxes plugin 1.2.8 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3226,7 +4072,9 @@
   <plugin name="user-avatar">
     <vulnerability>
       <title>User Avatar plugin 1.3.7 shell upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3234,7 +4082,9 @@
   <plugin name="extend-wordpress">
     <vulnerability>
       <title>Extend plugin 1.3.7 Shell Upload vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17872/</reference>
+      <references>
+        <exploitdb>17872</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3242,12 +4092,16 @@
   <plugin name="adrotate">
     <vulnerability>
       <title>AdRotate plugin &lt;= 3.6.5 SQL Injection Vulnerability</title>
-      <reference>http://unconciousmind.blogspot.com/2011/09/wordpress-adrotate-plugin-365-sql.html</reference>
+      <references>
+        <url>http://unconciousmind.blogspot.com/2011/09/wordpress-adrotate-plugin-365-sql.html</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>AdRotate plugin &lt;= 3.6.6 SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/18114/</reference>
+      <references>
+        <exploitdb>18114</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3255,7 +4109,9 @@
   <plugin name="wp-spamfree">
     <vulnerability>
       <title>WP-SpamFree 3.2.1 Spam SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/17970/</reference>
+      <references>
+        <exploitdb>17970</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3263,18 +4119,24 @@
   <plugin name="gd-star-rating">
     <vulnerability>
       <title>WordPress GD Star Rating Plugin Export Security Bypass Security Issue</title>
-      <reference>http://secunia.com/advisories/49850/</reference>
+      <references>
+        <secunia>49850</secunia>
+      </references>
       <type>AUTHBYPASS</type>
       <fixed_in>1.9.19</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>GD Star Rating plugin &lt;= 1.9.16 Cross Site Scripting</title>
-      <reference>http://www.packetstormsecurity.org/files/112702</reference>
+      <references>
+        <url>http://www.packetstormsecurity.org/files/112702</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>GD Star Rating plugin &lt;= 1.9.10 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/17973/</reference>
+      <references>
+        <exploitdb>17973</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3282,7 +4144,9 @@
   <plugin name="contact-form-wordpress">
     <vulnerability>
       <title>Contact Form plugin &lt;= 2.7.5 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/17980/</reference>
+      <references>
+        <exploitdb>17980</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3290,41 +4154,55 @@
   <plugin name="wp-photo-album-plus">
     <vulnerability>
       <title>WP Photo Album Plus &lt;= 4.1.1 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/17983/</reference>
+      <references>
+        <exploitdb>17983</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WP Photo Album Plus &lt;= 4.8.12 Cross-Site Scripting</title>
-      <reference>http://secunia.com/advisories/51679/</reference>
+      <references>
+        <secunia>51679</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WP Photo Album Plus Full Path Disclosure</title>
-      <reference>http://1337day.com/exploit/20125</reference>
+      <references>
+        <url>http://1337day.com/exploit/20125</url>
+      </references>
       <type>FPD</type>
       <fixed_in>4.9.1</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WP Photo Album Plus XSS</title>
-      <reference>http://secunia.com/advisories/51829/</reference>
+      <references>
+        <secunia>51829</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>4.9.3</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WP Photo Album Plus XSS</title>
-      <reference>http://secunia.com/advisories/51669/</reference>
+      <references>
+        <secunia>51669</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>4.9.3</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress WP Photo Album Plus Plugin "commentid" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53105/</reference>
+      <references>
+        <secunia>53105</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>5.0.3</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WP Photo Album Plus wp-admin/admin.php edit_id Parameter XSS</title>
-      <reference>http://osvdb.org/94465</reference>
+      <references>
+        <osvdb>94465</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>5.0.11</fixed_in>
     </vulnerability>
@@ -3333,12 +4211,16 @@
   <plugin name="backwpup">
     <vulnerability>
       <title>BackWPUp 2.1.4 Code Execution</title>
-      <reference>http://www.exploit-db.com/exploits/17987/</reference>
+      <references>
+        <exploitdb>17987</exploitdb>
+      </references>
       <type>RCE</type>
     </vulnerability>
     <vulnerability>
       <title>plugin BackWPup 1.5.2, 1.6.1, 1.7.1 Remote and Local Code Execution Vulnerability</title>
-      <reference>http://osvdb.org/71481</reference>
+      <references>
+        <osvdb>71481</osvdb>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </plugin>
@@ -3346,8 +4228,10 @@
   <plugin name="portable-phpmyadmin">
     <vulnerability>
       <title>portable-phpMyAdmin Authentication Bypass</title>
-      <reference>http://www.exploit-db.com/exploits/23356</reference>
-      <reference>http://secunia.com/advisories/51520/</reference>
+      <references>
+        <exploitdb>23356</exploitdb>
+        <secunia>51520</secunia>
+      </references>
       <type>AUTHBYPASS</type>
       <fixed_in>1.3.1</fixed_in>
     </vulnerability>
@@ -3356,7 +4240,9 @@
   <plugin name="super-refer-a-friend">
     <vulnerability>
       <title>super-refer-a-friend Full Path Disclosure</title>
-      <reference>http://1337day.com/exploit/20126</reference>
+      <references>
+        <url>http://1337day.com/exploit/20126</url>
+      </references>
       <type>FPD</type>
       <fixed_in>1.0</fixed_in>
     </vulnerability>
@@ -3365,18 +4251,24 @@
   <plugin name="w3-total-cache">
     <vulnerability>
       <title>W3-Total-Cache Username and Hash Extract</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Dec/242</reference>
-      <reference>https://github.com/FireFart/W3TotalCacheExploit</reference>
-      <metasploit>auxiliary/gather/wp_w3_total_cache_hash_extract</metasploit>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Dec/242</url>
+        <url>https://github.com/FireFart/W3TotalCacheExploit</url>
+        <metasploit>auxiliary/gather/wp_w3_total_cache_hash_extract</metasploit>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>0.9.2.5</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>W3-Total-Cache Remote Code Execution</title>
-      <reference>http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/</reference>
-      <reference>http://wordpress.org/support/topic/pwn3d</reference>
-      <reference>http://blog.sucuri.net/2013/04/update-wp-super-cache-and-w3tc-immediately-remote-code-execution-vulnerability-disclosed.html</reference>
-      <metasploit>exploits/unix/webapp/php_wordpress_total_cache</metasploit>
+      <references>
+        <url>http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/</url>
+        <url>http://wordpress.org/support/topic/pwn3d</url>
+        <url>
+          http://blog.sucuri.net/2013/04/update-wp-super-cache-and-w3tc-immediately-remote-code-execution-vulnerability-disclosed.html
+        </url>
+        <metasploit>exploits/unix/webapp/php_wordpress_total_cache</metasploit>
+      </references>
       <type>RCE</type>
       <fixed_in>0.9.2.9</fixed_in>
     </vulnerability>
@@ -3385,9 +4277,13 @@
   <plugin name="wp-super-cache">
     <vulnerability>
       <title>WP-Super-Cache Remote Code Execution</title>
-      <reference>http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/</reference>
-      <reference>http://wordpress.org/support/topic/pwn3d</reference>
-      <reference>http://blog.sucuri.net/2013/04/update-wp-super-cache-and-w3tc-immediately-remote-code-execution-vulnerability-disclosed.html</reference>
+      <references>
+        <url>http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/</url>
+        <url>http://wordpress.org/support/topic/pwn3d</url>
+        <url>
+          http://blog.sucuri.net/2013/04/update-wp-super-cache-and-w3tc-immediately-remote-code-execution-vulnerability-disclosed.html
+        </url>
+      </references>
       <type>RCE</type>
       <fixed_in>1.3.1</fixed_in>
     </vulnerability>
@@ -3396,12 +4292,16 @@
   <plugin name="ripe-hd-player">
     <vulnerability>
       <title>ripe-hd-player 1.0 SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/24229/</reference>
+      <references>
+        <exploitdb>24229</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>ripe-hd-player 1.0 Full Path Disclosure</title>
-      <reference>http://www.exploit-db.com/exploits/24229/</reference>
+      <references>
+        <exploitdb>24229</exploitdb>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -3409,14 +4309,18 @@
   <plugin name="floating-tweets">
     <vulnerability>
       <title>floating-tweets persistent XSS</title>
-      <reference>http://packetstormsecurity.com/files/119499/floatingtweets-xsstraversal.txt</reference>
-      <reference>http://websecurity.com.ua/6023/</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/119499/floatingtweets-xsstraversal.txt</url>
+        <url>http://websecurity.com.ua/6023/</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>floating-tweets directory traversal</title>
-      <reference>http://packetstormsecurity.com/files/119499/floatingtweets-xsstraversal.txt</reference>
-      <reference>http://websecurity.com.ua/6023/</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/119499/floatingtweets-xsstraversal.txt</url>
+        <url>http://websecurity.com.ua/6023/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -3424,8 +4328,10 @@
   <plugin name="ipfeuilledechou">
     <vulnerability>
       <title>ipfeuilledechou SQL Injection Vulnerability</title>
-      <reference>http://www.exploit4arab.com/exploits/377</reference>
-      <reference>http://1337day.com/exploits/20206</reference>
+      <references>
+        <url>http://www.exploit4arab.com/exploits/377</url>
+        <url>http://1337day.com/exploits/20206</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3433,13 +4339,17 @@
   <plugin name="simple-login-log">
     <vulnerability>
       <title>Simple Login Log Plugin XSS</title>
-      <reference>http://secunia.com/advisories/51780/</reference>
+      <references>
+        <secunia>51780</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>0.9.4</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>Simple Login Log Plugin SQL Injection</title>
-      <reference>http://secunia.com/advisories/51780/</reference>
+      <references>
+        <secunia>51780</secunia>
+      </references>
       <type>SQLI</type>
       <fixed_in>0.9.4</fixed_in>
     </vulnerability>
@@ -3448,7 +4358,9 @@
   <plugin name="wp-slimstat">
     <vulnerability>
       <title>wp-slimstat XSS</title>
-      <reference>http://secunia.com/advisories/51721/</reference>
+      <references>
+        <secunia>51721</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>2.8.5</fixed_in>
     </vulnerability>
@@ -3457,7 +4369,9 @@
   <plugin name="browser-rejector">
     <vulnerability>
       <title>browser-rejector Remote and Local File Inclusion</title>
-      <reference>http://secunia.com/advisories/51739/</reference>
+      <references>
+        <secunia>51739</secunia>
+      </references>
       <type>LFI</type>
       <fixed_in>2.11</fixed_in>
     </vulnerability>
@@ -3466,7 +4380,9 @@
   <plugin name="wp-file-uploader">
     <vulnerability>
       <title>WordPress File Uploader Plugin PHP File Upload Vulnerability</title>
-      <reference>http://la.usch.io/2013/01/21/wordpress-file-uploader-plugin-php-file-upload-vulnerability/</reference>
+      <references>
+        <url>http://la.usch.io/2013/01/21/wordpress-file-uploader-plugin-php-file-upload-vulnerability/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3474,20 +4390,26 @@
   <plugin name="cardoza-wordpress-poll">
     <vulnerability>
       <title>WordPress Poll Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/51925/</reference>
+      <references>
+        <secunia>51925</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>34.06</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin</title>
-      <reference>http://secunia.com/advisories/51942/</reference>
-      <reference>http://www.girlinthemiddle.net/2013/01/multiple-sql-injection-vulnerabilities.html</reference>
-      <reference>http://seclists.org/bugtraq/2013/Jan/86</reference>
+      <references>
+        <secunia>51942</secunia>
+        <url>http://www.girlinthemiddle.net/2013/01/multiple-sql-injection-vulnerabilities.html</url>
+        <url>http://seclists.org/bugtraq/2013/Jan/86</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Poll Plugin Multiple SQL Injection Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50910/</reference>
+      <references>
+        <secunia>50910</secunia>
+      </references>
       <type>SQLI</type>
       <fixed_in>33.6</fixed_in>
     </vulnerability>
@@ -3496,9 +4418,11 @@
   <plugin name="devformatter">
     <vulnerability>
       <title>Wordpress Developer Formatter CSRF and XSS Vulnerability</title>
-      <reference>http://illsecure.com/code/Wordpress-DevFormatter-CSRF-Vulnerability.txt</reference>
-      <reference>http://1337day.com/exploits/20210</reference>
-      <reference>http://secunia.com/advisories/51912/</reference>
+      <references>
+        <url>http://illsecure.com/code/Wordpress-DevFormatter-CSRF-Vulnerability.txt</url>
+        <url>http://1337day.com/exploits/20210</url>
+        <secunia>51912</secunia>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -3506,7 +4430,9 @@
   <plugin name="dvs-custom-notification">
     <vulnerability>
       <title>WordPress DVS Custom Notification Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/51531/</reference>
+      <references>
+        <secunia>51531</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.0.1</fixed_in>
     </vulnerability>
@@ -3515,15 +4441,19 @@
   <plugin name="events-manager">
     <vulnerability>
       <title>WordPress Events Manager Plugin Multiple Cross-Site Scripting Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/51869/</reference>
+      <references>
+        <secunia>51869</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>5.3.4</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress Events Manager Multiple Cross Site Scripting Vulnerabilities</title>
-      <reference>http://www.securityfocus.com/bid/60078</reference>
-      <reference>http://secunia.com/advisories/53478/</reference>
-      <reference>http://osvdb.org/93558</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/60078</url>
+        <secunia>53478</secunia>
+        <osvdb>93558</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>5.3.9</fixed_in>
     </vulnerability>
@@ -3532,8 +4462,10 @@
   <plugin name="solvemedia">
     <vulnerability>
       <title>WordPress SolveMedia CSRF Vulnerability</title>
-      <reference>http://1337day.com/exploit/20222</reference>
-      <reference>http://secunia.com/advisories/51927/</reference>
+      <references>
+        <url>http://1337day.com/exploit/20222</url>
+        <secunia>51927</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.1.1</fixed_in>
     </vulnerability>
@@ -3542,7 +4474,9 @@
   <plugin name="usc-e-shop">
     <vulnerability>
       <title>WordPress Welcart e-Commerce Plugin Cross-Site Scripting and Request Forgery Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/51581/</reference>
+      <references>
+        <secunia>51581</secunia>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -3550,7 +4484,9 @@
   <plugin name="knews">
     <vulnerability>
       <title>WordPress Knews Multilingual Newsletters Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/51543/</reference>
+      <references>
+        <secunia>51543</secunia>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -3558,7 +4494,9 @@
   <plugin name="video-lead-form">
     <vulnerability>
       <title>WordPress Video Lead Form Plugin "errMsg" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/51419/</reference>
+      <references>
+        <secunia>51419</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3566,15 +4504,19 @@
   <plugin name="woocommerce-predictive-search">
     <vulnerability>
       <title>WordPress WooCommerce Predictive Search Plugin "rs" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/51385/</reference>
+      <references>
+        <secunia>51385</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
 
   <plugin name="woocommerce">
     <vulnerability>
-      <title> WooCommerce index.php calc_shipping_state Parameter XSS</title>
-      <reference>http://osvdb.org/95480</reference>
+      <title>WooCommerce index.php calc_shipping_state Parameter XSS</title>
+      <references>
+        <osvdb>95480</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>2.0.13</fixed_in>
     </vulnerability>
@@ -3583,7 +4525,9 @@
   <plugin name="wp-e-commerce-predictive-search">
     <vulnerability>
       <title>WordPress WP e-Commerce Predictive Search Plugin "rs" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/51384/</reference>
+      <references>
+        <secunia>51384</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3591,7 +4535,9 @@
   <plugin name="wp-tiger">
     <vulnerability>
       <title>WordPress vTiger CRM Lead Capture Plugin Unspecified Vulnerability</title>
-      <reference>http://secunia.com/advisories/51305/</reference>
+      <references>
+        <secunia>51305</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>1.1.0</fixed_in>
     </vulnerability>
@@ -3600,12 +4546,16 @@
   <plugin name="wp-postviews">
     <vulnerability>
       <title>WordPress post-views Plugin "search_input" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/50982/</reference>
+      <references>
+        <secunia>50982</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress WP-PostViews Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/53127/</reference>
+      <references>
+        <secunia>53127</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.63</fixed_in>
     </vulnerability>
@@ -3614,7 +4564,9 @@
   <plugin name="dx-contribute">
     <vulnerability>
       <title>WordPress DX-Contribute Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/51082/</reference>
+      <references>
+        <secunia>51082</secunia>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -3622,17 +4574,21 @@
   <plugin name="wysija-newsletters">
     <vulnerability>
       <title>SQL Injection Vulnerability in Wysija Newsletters WordPress Plugin</title>
-      <reference>https://www.htbridge.com/advisory/HTB23140</reference>
-      <reference>http://packetstormsecurity.com/files/120089/wpwysijanl-sql.txt</reference>
-      <reference>http://seclists.org/bugtraq/2013/Feb/29</reference>
-      <reference>http://cxsecurity.com/issue/WLB-2013020039</reference>
+      <references>
+        <url>https://www.htbridge.com/advisory/HTB23140</url>
+        <url>http://packetstormsecurity.com/files/120089/wpwysijanl-sql.txt</url>
+        <url>http://seclists.org/bugtraq/2013/Feb/29</url>
+        <url>http://cxsecurity.com/issue/WLB-2013020039</url>
+      </references>
       <type>SQLI</type>
       <fixed_in>2.2.1</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress Wysija Newsletters Plugin swfupload Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/51249/</reference>
-      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <references>
+        <secunia>51249</secunia>
+        <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
+      </references>
       <type>XSS</type>
       <fixed_in>2.1.7</fixed_in>
     </vulnerability>
@@ -3641,7 +4597,9 @@
   <plugin name="hitasoft_player">
     <vulnerability>
       <title>WordPress Hitasoft FLV Player Plugin "id" SQL Injection Vulnerability</title>
-      <reference>http://secunia.com/advisories/51179/</reference>
+      <references>
+        <secunia>51179</secunia>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3649,7 +4607,9 @@
   <plugin name="spider-calendar">
     <vulnerability>
       <title>WordPress Spider Calendar Plugin "many_sp_calendar" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/50981/</reference>
+      <references>
+        <secunia>50981</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3657,7 +4617,9 @@
   <plugin name="dynamic-font-replacement-4wp">
     <vulnerability>
       <title>Wordpress Dynamic Font Replacement 1.3 plugin SQL Injection Vulnerability</title>
-      <reference>http://1337day.com/exploit/20239</reference>
+      <references>
+        <url>http://1337day.com/exploit/20239</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3665,7 +4627,9 @@
   <plugin name="form">
     <vulnerability>
       <title>WordPress Zingiri Form Builder Plugin "error" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/50983/</reference>
+      <references>
+        <secunia>50983</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>1.2.1</fixed_in>
     </vulnerability>
@@ -3674,7 +4638,9 @@
   <plugin name="white-label-cms">
     <vulnerability>
       <title>WordPress White Label CMS Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/50487/</reference>
+      <references>
+        <secunia>50487</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.5.1</fixed_in>
     </vulnerability>
@@ -3683,7 +4649,9 @@
   <plugin name="download-shortcode">
     <vulnerability>
       <title>Wordpress Download Shortcode Plugin "file" Arbitrary File Disclosure Vulnerability</title>
-      <reference>http://secunia.com/advisories/50924/</reference>
+      <references>
+        <secunia>50924</secunia>
+      </references>
       <type>LFI</type>
       <fixed_in>0.2.1</fixed_in>
     </vulnerability>
@@ -3692,7 +4660,9 @@
   <plugin name="crayon-syntax-hightlighter">
     <vulnerability>
       <title>WordPress Crayon Syntax Highlighter Plugin "wp_load" Remote File Inclusion Vulnerability</title>
-      <reference>http://secunia.com/advisories/50804/</reference>
+      <references>
+        <secunia>50804</secunia>
+      </references>
       <type>RFI</type>
       <fixed_in>1.13</fixed_in>
     </vulnerability>
@@ -3701,7 +4671,9 @@
   <plugin name="eshop-magic">
     <vulnerability>
       <title>WordPress eShop Magic Plugin "file" Arbitrary File Disclosure Vulnerability</title>
-      <reference>http://secunia.com/advisories/50933/</reference>
+      <references>
+        <secunia>50933</secunia>
+      </references>
       <type>LFI</type>
       <fixed_in>0.2</fixed_in>
     </vulnerability>
@@ -3710,7 +4682,9 @@
   <plugin name="pinterest-pin-it-button">
     <vulnerability>
       <title>WordPress Pinterest "Pin It" Button Lite Plugin Multiple Unspecified Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50868/</reference>
+      <references>
+        <secunia>50868</secunia>
+      </references>
       <type>MULTI</type>
       <fixed_in>1.4.0</fixed_in>
     </vulnerability>
@@ -3719,7 +4693,9 @@
   <plugin name="css-plus">
     <vulnerability>
       <title>WordPress CSS Plus Plugin Unspecified Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50793/</reference>
+      <references>
+        <secunia>50793</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>1.3.2</fixed_in>
     </vulnerability>
@@ -3728,7 +4704,9 @@
   <plugin name="multisite-plugin-manager">
     <vulnerability>
       <title>WordPress Multisite Plugin Manager Plugin Two Cross-Site Scripting Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50762/</reference>
+      <references>
+        <secunia>50762</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>3.1.2</fixed_in>
     </vulnerability>
@@ -3737,7 +4715,9 @@
   <plugin name="abc-test">
     <vulnerability>
       <title>WordPress ABC Test Plugin "id" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/50608/</reference>
+      <references>
+        <secunia>50608</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3745,7 +4725,9 @@
   <plugin name="token-manager">
     <vulnerability>
       <title>Wordpress Token Manager Plugin "tid" Cross-Site Scripting Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50722/</reference>
+      <references>
+        <secunia>50722</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3753,7 +4735,9 @@
   <plugin name="sexy-add-template">
     <vulnerability>
       <title>WordPress Sexy Add Template Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/50709/</reference>
+      <references>
+        <secunia>50709</secunia>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -3761,7 +4745,9 @@
   <plugin name="notices">
     <vulnerability>
       <title>WordPress Notices Ticker Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/50717/</reference>
+      <references>
+        <secunia>50717</secunia>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -3769,7 +4755,9 @@
   <plugin name="mf-gig-calendar">
     <vulnerability>
       <title>WordPress MF Gig Calendar Plugin URL Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/50571/</reference>
+      <references>
+        <secunia>50571</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3777,12 +4765,16 @@
   <plugin name="wp-topbar">
     <vulnerability>
       <title>wp-topbar &lt;= 3.04 XSS in ZeroClipboard.swf</title>
-      <reference>http://1337day.com/exploit/20396</reference>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress WP-TopBar Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/50693/</reference>
+      <references>
+        <secunia>50693</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>4.0.3</fixed_in>
     </vulnerability>
@@ -3791,7 +4783,9 @@
   <plugin name="webplayer">
     <vulnerability>
       <title>WordPress HD Webplayer Plugin Two SQL Injection Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50466/</reference>
+      <references>
+        <secunia>50466</secunia>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3799,7 +4793,9 @@
   <plugin name="cloudsafe365-for-wp">
     <vulnerability>
       <title>WordPress Cloudsafe365 Plugin Multiple Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50392/</reference>
+      <references>
+        <secunia>50392</secunia>
+      </references>
       <type>MULTI</type>
       <fixed_in>1.47</fixed_in>
     </vulnerability>
@@ -3808,7 +4804,9 @@
   <plugin name="vitamin">
     <vulnerability>
       <title>WordPress Vitamin Plugin Two Arbitrary File Disclosure Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50176/</reference>
+      <references>
+        <secunia>50176</secunia>
+      </references>
       <type>LFI</type>
       <fixed_in>1.1</fixed_in>
     </vulnerability>
@@ -3817,7 +4815,9 @@
   <plugin name="featured-post-with-thumbnail">
     <vulnerability>
       <title>WordPress Featured Post with thumbnail Plugin Unspecified timthumb Vulnerability</title>
-      <reference>http://secunia.com/advisories/50161/</reference>
+      <references>
+        <secunia>50161</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>1.5</fixed_in>
     </vulnerability>
@@ -3826,7 +4826,9 @@
   <plugin name="wp-effective-lead-management">
     <vulnerability>
       <title>WordPress WP Lead Management Plugin Script Insertion Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50166/</reference>
+      <references>
+        <secunia>50166</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3835,7 +4837,9 @@
     <vulnerability>
       <title>WordPress XVE Various Embed Plugin JW Player Multiple Cross-Site Scripting Vulnerabilities
       </title>
-      <reference>http://secunia.com/advisories/50173/</reference>
+      <references>
+        <secunia>50173</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>1.0.4</fixed_in>
     </vulnerability>
@@ -3844,7 +4848,9 @@
   <plugin name="g-lock-double-opt-in-manager">
     <vulnerability>
       <title>WordPress G-Lock Double Opt-in Manager Plugin Two Security Bypass Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50100/</reference>
+      <references>
+        <secunia>50100</secunia>
+      </references>
       <type>AUTHBYPASS</type>
     </vulnerability>
   </plugin>
@@ -3852,7 +4858,9 @@
   <plugin name="kau-boys-backend-localization">
     <vulnerability>
       <title>WordPress Backend Localization Plugin Cross-Site Scripting Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50099/</reference>
+      <references>
+        <secunia>50099</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>2.0</fixed_in>
     </vulnerability>
@@ -3861,7 +4869,9 @@
   <plugin name="flexi-quote-rotator">
     <vulnerability>
       <title>WordPress Flexi Quote Rotator Plugin Cross-Site Request Forgery and SQL Injection Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/49910/</reference>
+      <references>
+        <secunia>49910</secunia>
+      </references>
       <type>MULTI</type>
       <fixed_in>0.9.2</fixed_in>
     </vulnerability>
@@ -3870,7 +4880,9 @@
   <plugin name="gotmls">
     <vulnerability>
       <title>WordPress Get Off Malicious Scripts Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/50030/</reference>
+      <references>
+        <secunia>50030</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>1.2.07.20</fixed_in>
     </vulnerability>
@@ -3879,7 +4891,9 @@
   <plugin name="cimy-user-extra-fields">
     <vulnerability>
       <title>WordPress Cimy User Extra Fields Plugin Arbitrary File Upload Vulnerability</title>
-      <reference>http://secunia.com/advisories/49975/</reference>
+      <references>
+        <secunia>49975</secunia>
+      </references>
       <type>UPLOAD</type>
       <fixed_in>2.3.9</fixed_in>
     </vulnerability>
@@ -3888,7 +4902,9 @@
   <plugin name="nmedia-user-file-uploader">
     <vulnerability>
       <title>WordPress Nmedia Users File Uploader Plugin Arbitrary File Upload Vulnerability</title>
-      <reference>http://secunia.com/advisories/49996/</reference>
+      <references>
+        <secunia>49996</secunia>
+      </references>
       <type>UPLOAD</type>
       <fixed_in>2.0</fixed_in>
     </vulnerability>
@@ -3897,7 +4913,9 @@
   <plugin name="wp-explorer-gallery">
     <vulnerability>
       <title>wp-explorer-gallery Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20251</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20251</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3905,7 +4923,9 @@
   <plugin name="accordion">
     <vulnerability>
       <title>accordion Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20254</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20254</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3913,7 +4933,9 @@
   <plugin name="wp-catpro">
     <vulnerability>
       <title>wp-catpro Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20256</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20256</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -3921,7 +4943,9 @@
   <plugin name="RLSWordPressSearch">
     <vulnerability>
       <title>Wordpress RLSWordPressSearch plugin SQL Injection</title>
-      <reference>http://www.exploit-db.com/exploits/24440/</reference>
+      <references>
+        <exploitdb>24440</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3929,15 +4953,19 @@
   <plugin name="wordpress-simple-shout-box">
     <vulnerability>
       <title>wordpress-simple-shout-box Plugin SQL Injection</title>
-      <reference>http://cxsecurity.com/issue/WLB-2013010235</reference>
+      <references>
+        <url>http://cxsecurity.com/issue/WLB-2013010235</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
 
   <plugin name="portfolio-slideshow-pro">
     <vulnerability>
-      <title>Wordpress portfolio-slideshow-pro v3 Plugin SQL Injection </title>
-      <reference>http://cxsecurity.com/issue/WLB-2013010236</reference>
+      <title>Wordpress portfolio-slideshow-pro v3 Plugin SQL Injection</title>
+      <references>
+        <url>http://cxsecurity.com/issue/WLB-2013010236</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3945,7 +4973,9 @@
   <plugin name="simple-history">
     <vulnerability>
       <title>WordPress Simple History Plugin RSS Feed "rss_secret" Disclosure Weakness</title>
-      <reference>http://secunia.com/advisories/51998/</reference>
+      <references>
+        <secunia>51998</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>1.0.8</fixed_in>
     </vulnerability>
@@ -3954,7 +4984,9 @@
   <plugin name="p1m-media-manager">
     <vulnerability>
       <title>WordPress p1m media manager plugin SQL Injection Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20270</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20270</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3962,14 +4994,18 @@
   <plugin name="wp-table-reloaded">
     <vulnerability>
       <title>wp-table-reloaded &lt;= 1.9.3 XSS in ZeroClipboard.swf</title>
-      <reference>http://1337day.com/exploit/20396</reference>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress wp-table-reloaded plugin cross-site scripting in SWF</title>
-      <reference>http://packetstormsecurity.com/files/119968/wptablereloaded-xss.txt</reference>
-      <reference>http://secunia.com/advisories/52027/</reference>
-      <reference>http://seclists.org/bugtraq/2013/Feb/28</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/119968/wptablereloaded-xss.txt</url>
+        <secunia>52027</secunia>
+        <url>http://seclists.org/bugtraq/2013/Feb/28</url>
+      </references>
       <type>XSS</type>
       <fixed_in>1.9.4</fixed_in>
     </vulnerability>
@@ -3978,7 +5014,9 @@
   <plugin name="wordpress-gallery">
     <vulnerability>
       <title>WordPress Gallery Plugin "load" Remote File Inclusion Vulnerability</title>
-      <reference>http://secunia.com/advisories/51347/</reference>
+      <references>
+        <secunia>51347</secunia>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -3986,7 +5024,9 @@
   <plugin name="forumconverter">
     <vulnerability>
       <title>Wordpress plugins ForumConverter SQL Injection Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20275</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20275</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -3994,13 +5034,17 @@
   <plugin name="newsletter">
     <vulnerability>
       <title>WordPress plugins Newsletter SQL Injection Vulnerability</title>
-      <reference>http://www.1337day.com/exploit/20287</reference>
+      <references>
+        <url>http://www.1337day.com/exploit/20287</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Newsletter Plugin "alert" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53398/</reference>
-      <reference>http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5141.php</reference>
+      <references>
+        <secunia>53398</secunia>
+        <url>http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5141.php</url>
+      </references>
       <type>XSS</type>
       <fixed_in>3.2.7</fixed_in>
     </vulnerability>
@@ -4009,11 +5053,13 @@
   <plugin name="commentluv">
     <vulnerability>
       <title>Cross-Site Scripting (XSS) Vulnerability in CommentLuv WordPress Plugin</title>
-      <reference>https://www.htbridge.com/advisory/HTB23138</reference>
-      <reference>http://packetstormsecurity.com/files/120090/wpcommentluv-xss.txt</reference>
-      <reference>http://seclists.org/bugtraq/2013/Feb/30</reference>
-      <reference>http://cxsecurity.com/issue/WLB-2013020040</reference>
-      <reference>http://secunia.com/advisories/52092/</reference>
+      <references>
+        <url>https://www.htbridge.com/advisory/HTB23138</url>
+        <url>http://packetstormsecurity.com/files/120090/wpcommentluv-xss.txt</url>
+        <url>http://seclists.org/bugtraq/2013/Feb/30</url>
+        <url>http://cxsecurity.com/issue/WLB-2013020040</url>
+        <secunia>52092</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>2.92.4</fixed_in>
     </vulnerability>
@@ -4022,7 +5068,9 @@
   <plugin name="wp-forum">
     <vulnerability>
       <title>Wordpress wp-forum plugin SQL Injection</title>
-      <reference>http://cxsecurity.com/issue/WLB-2013020035</reference>
+      <references>
+        <url>http://cxsecurity.com/issue/WLB-2013020035</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -4030,7 +5078,9 @@
   <plugin name="wp-ecommerce-shop-styling">
     <vulnerability>
       <title>WordPress WP ecommerce Shop Styling Plugin "dompdf" Remote File Inclusion Vulnerability</title>
-      <reference>http://secunia.com/advisories/51707/</reference>
+      <references>
+        <secunia>51707</secunia>
+      </references>
       <type>RFI</type>
       <fixed_in>1.8</fixed_in>
     </vulnerability>
@@ -4039,8 +5089,10 @@
   <plugin name="audio-player">
     <vulnerability>
       <title>Wordpress Audio Player Plugin XSS in SWF</title>
-      <reference>http://seclists.org/bugtraq/2013/Feb/35</reference>
-      <reference>http://secunia.com/advisories/52083/</reference>
+      <references>
+        <url>http://seclists.org/bugtraq/2013/Feb/35</url>
+        <secunia>52083</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>2.0.4.6</fixed_in>
     </vulnerability>
@@ -4049,7 +5101,9 @@
   <plugin name="ckeditor-for-wordpress">
     <vulnerability>
       <title>Wordpress plugin CKEditor 4.0 Arbitrary File Upload Exploit</title>
-      <reference>http://1337day.com/exploit/20318</reference>
+      <references>
+        <url>http://1337day.com/exploit/20318</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -4057,17 +5111,23 @@
   <plugin name="myftp-ftp-like-plugin-for-wordpress">
     <vulnerability>
       <title>wordpress myftp-ftp-like-plugin-for-wordpress plugin v2 Plugin SQL Injection</title>
-      <reference>http://cxsecurity.com/issue/WLB-2013020061</reference>
+      <references>
+        <url>http://cxsecurity.com/issue/WLB-2013020061</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
 
   <plugin name="wp-online-store">
     <vulnerability>
-      <title>WordPress WP Online Store Plugin 1.3.1 downloaded before 2013-01-17 File Disclosure and File Inclusion Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50836/</reference>
-      <reference>http://ceriksen.com/2013/02/18/wordpress-online-store-arbitrary-file-disclosure/</reference>
-      <reference>http://ceriksen.com/2013/02/18/wordpress-online-store-local-file-inclusion-vulnerability/</reference>
+      <title>WordPress WP Online Store Plugin 1.3.1 downloaded before 2013-01-17 File Disclosure and File Inclusion
+        Vulnerabilities
+      </title>
+      <references>
+        <secunia>50836</secunia>
+        <url>http://ceriksen.com/2013/02/18/wordpress-online-store-arbitrary-file-disclosure/</url>
+        <url>http://ceriksen.com/2013/02/18/wordpress-online-store-local-file-inclusion-vulnerability/</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -4075,7 +5135,9 @@
   <plugin name="password-protected">
     <vulnerability>
       <title>Password Protected 1.4 Login Process redirect_to Parameter Arbitrary Site Redirect</title>
-      <reference>http://osvdb.org/90559</reference>
+      <references>
+        <osvdb>90559</osvdb>
+      </references>
       <type>REDIRECT</type>
     </vulnerability>
   </plugin>
@@ -4083,7 +5145,9 @@
   <plugin name="contact-form-plugin">
     <vulnerability>
       <title>Contact Form Plugin XSS</title>
-      <reference>http://osvdb.org/90503</reference>
+      <references>
+        <osvdb>90503</osvdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4091,9 +5155,11 @@
   <plugin name="smart-flv">
     <vulnerability>
       <title>smart-flv jwplayer.swf XSS</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/02/24/7</reference>
-      <reference>http://packetstormsecurity.com/files/115100/jwplayer-xss.txt</reference>
-      <reference>http://osvdb.org/90606</reference>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/02/24/7</url>
+        <url>http://packetstormsecurity.com/files/115100/jwplayer-xss.txt</url>
+        <osvdb>90606</osvdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4101,7 +5167,9 @@
   <plugin name="GoogleAlertandtwitterplugin">
     <vulnerability>
       <title>Google Alert And Twitter v.3.1.5 XSS Exploit, SQL Injection</title>
-      <reference>http://1337day.com/exploits/20433</reference>
+      <references>
+        <url>http://1337day.com/exploits/20433</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -4109,8 +5177,11 @@
   <plugin name="php-shell">
     <vulnerability>
       <title>PHP Shell Plugin</title>
-      <reference>https://github.com/wpscanteam/wpscan/issues/138</reference>
-      <reference>http://plugins.svn.wordpress.org/php-shell/trunk/shell.php</reference>
+      <references>
+
+        <url>https://github.com/wpscanteam/wpscan/issues/138</url>
+        <url>http://plugins.svn.wordpress.org/php-shell/trunk/shell.php</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </plugin>
@@ -4118,7 +5189,9 @@
   <plugin name="marekkis-watermark">
     <vulnerability>
       <title>Marekkis Watermark Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.com/files/120378/wpmarekkiswatermark-xss.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/120378/wpmarekkiswatermark-xss.txt</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4126,7 +5199,9 @@
   <plugin name="responsive-logo-slideshow">
     <vulnerability>
       <title>Responsive Logo Slideshow Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.com/files/120379/wpresponsivelogo-xss.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/120379/wpresponsivelogo-xss.txt</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4134,9 +5209,11 @@
   <plugin name="zopim-live-chat">
     <vulnerability>
       <title>zopim-live-chat &lt;= 1.2.5 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4144,8 +5221,10 @@
   <plugin name="ed2k-link-selector">
     <vulnerability>
       <title>ed2k-link-selector &lt;= 1.1.7 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4153,9 +5232,11 @@
   <plugin name="wppygments">
     <vulnerability>
       <title>wppygments &lt;= 0.3.2 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4163,8 +5244,10 @@
   <plugin name="copy-in-clipboard">
     <vulnerability>
       <title>copy-in-clipboard &lt;= 0.8 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4172,8 +5255,10 @@
   <plugin name="search-and-share">
     <vulnerability>
       <title>search-and-share &lt;= 0.9.3 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4181,8 +5266,10 @@
   <plugin name="placester">
     <vulnerability>
       <title>placester &lt;= 0.3.12 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4190,8 +5277,10 @@
   <plugin name="drp-coupon">
     <vulnerability>
       <title>drp-coupon &lt;= 2.1 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4199,8 +5288,10 @@
   <plugin name="coupon-code-plugin">
     <vulnerability>
       <title>coupon-code-plugin &lt;= 2.1 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4208,8 +5299,10 @@
   <plugin name="q2w3-inc-manager">
     <vulnerability>
       <title>q2w3-inc-manager &lt;= 2.3.1 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4217,8 +5310,10 @@
   <plugin name="scorerender">
     <vulnerability>
       <title>scorerender &lt;= 0.3.4 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4226,9 +5321,11 @@
   <plugin name="wp-link-to-us">
     <vulnerability>
       <title>wp-link-to-us &lt;= 2.0 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4236,9 +5333,11 @@
   <plugin name="buckets">
     <vulnerability>
       <title>buckets &lt;= 0.1.9.2 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4246,8 +5345,10 @@
   <plugin name="java-trackback">
     <vulnerability>
       <title>java-trackback &lt;= 0.2 XSS in ZeroClipboard</title>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4255,9 +5356,11 @@
   <plugin name="slidedeck2">
     <vulnerability>
       <title>slidedeck2 &lt;= 2.1.20130228 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4265,9 +5368,11 @@
   <plugin name="wp-clone-by-wp-academy">
     <vulnerability>
       <title>wp-clone-by-wp-academy &lt;= 2.1.1 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4275,9 +5380,11 @@
   <plugin name="tiny-url">
     <vulnerability>
       <title>tiny-url &lt;= 1.3.2 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4285,9 +5392,11 @@
   <plugin name="thethe-layout-grid">
     <vulnerability>
       <title>thethe-layout-grid &lt;= 1.0.0 XSS in ZeroClipboard.</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4295,9 +5404,11 @@
   <plugin name="paypal-digital-goods-monetization-powered-by-cleeng">
     <vulnerability>
       <title>paypal-digital-goods-monetization-powered-by-cleeng &lt;= 2.2.13 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4305,9 +5416,11 @@
   <plugin name="mobileview">
     <vulnerability>
       <title>mobileview &lt;= 1.0.7 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4315,9 +5428,11 @@
   <plugin name="jaspreetchahals-coupons-lite">
     <vulnerability>
       <title>jaspreetchahals-coupons-lite &lt;= 2.1 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4325,9 +5440,11 @@
   <plugin name="geshi-source-colorer">
     <vulnerability>
       <title>geshi-source-colorer &lt;= 0.13 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4335,9 +5452,11 @@
   <plugin name="click-to-copy-grab-box">
     <vulnerability>
       <title>click-to-copy-grab-box &lt;= 0.1.1 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4345,9 +5464,11 @@
   <plugin name="cleeng">
     <vulnerability>
       <title>cleeng &lt;= 2.3.2 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4355,9 +5476,11 @@
   <plugin name="bp-code-snippets">
     <vulnerability>
       <title>bp-code-snippets &lt;= 2.0 XSS in ZeroClipboard</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/2</reference>
-      <reference>http://1337day.com/exploit/20396</reference>
-      <cve>2013-1808</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/2</url>
+        <url>http://1337day.com/exploit/20396</url>
+        <cve>2013-1808</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4365,8 +5488,10 @@
   <plugin name="snazzy-archives">
     <vulnerability>
       <title>snazzy-archives &lt;= 1.7.1 XSS vulnerability</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/10/3</reference>
-      <cve>2009-4168</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/10/3</url>
+        <cve>2009-4168</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4374,8 +5499,10 @@
   <plugin name="vkontakte-api">
     <vulnerability>
       <title>vkontakte-api XSS vulnerability</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/03/11/1</reference>
-      <cve>2009-4168</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/03/11/1</url>
+        <cve>2009-4168</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4383,7 +5510,9 @@
   <plugin name="terillion-reviews">
     <vulnerability>
       <title>Terillion Reviews Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.com/files/120730/wpterillionreviews-xss.txt</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/120730/wpterillionreviews-xss.txt</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4391,7 +5520,9 @@
   <plugin name="o2s-gallery">
     <vulnerability>
       <title>o2s-gallery plugin Cross Site Scripting Vulnerability</title>
-      <reference>http://1337day.com/exploit/20516</reference>
+      <references>
+        <url>http://1337day.com/exploit/20516</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4399,7 +5530,9 @@
   <plugin name="bp-gallery">
     <vulnerability>
       <title>bp-gallery plugin v1.2.5 Cross Site Scripting Vulnerability</title>
-      <reference>http://1337day.com/exploit/20518</reference>
+      <references>
+        <url>http://1337day.com/exploit/20518</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4407,7 +5540,9 @@
   <plugin name="simply-poll">
     <vulnerability>
       <title>Simply Poll Plugin 1.4.1 - Multiple Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/24850/</reference>
+      <references>
+        <exploitdb>24850</exploitdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -4415,7 +5550,9 @@
   <plugin name="occasions">
     <vulnerability>
       <title>Occasions Plugin 1.0.4 - CSRF Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/24858/</reference>
+      <references>
+        <exploitdb>24858</exploitdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -4423,7 +5560,9 @@
   <plugin name="mathjax-latex">
     <vulnerability>
       <title>Mathjax Latex 1.1 CSRF Vulnerability</title>
-      <reference>http://1337day.com/exploit/20566</reference>
+      <references>
+        <url>http://1337day.com/exploit/20566</url>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -4431,8 +5570,11 @@
   <plugin name="wp-banners-lite">
     <vulnerability>
       <title>XSS vulnerability on WP-Banners-Lite</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Mar/209</reference>
-      <reference>http://threatpost.com/en_us/blogs/xss-flaw-wordpress-plugin-allows-injection-malicious-code-032513</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Mar/209</url>
+        <url>http://threatpost.com/en_us/blogs/xss-flaw-wordpress-plugin-allows-injection-malicious-code-032513
+        </url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4440,8 +5582,10 @@
   <plugin name="backupbuddy">
     <vulnerability>
       <title>Backupbuddy - sensitive data exposure in importbuddy.php</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Mar/206</reference>
-      <reference>http://archives.neohapsis.com/archives/fulldisclosure/2013-03/0205.html</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Mar/206</url>
+        <url>http://archives.neohapsis.com/archives/fulldisclosure/2013-03/0205.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -4449,7 +5593,9 @@
   <plugin name="wp-funeral-press">
     <vulnerability>
       <title>WP FuneralPress - Stored XSS in Guestbook</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Mar/282</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Mar/282</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4457,7 +5603,9 @@
   <plugin name="chikuncount">
     <vulnerability>
       <title>ofc_upload_image.php Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/24492/</reference>
+      <references>
+        <exploitdb>24492</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -4465,9 +5613,11 @@
   <plugin name="open-flash-chart-core-wordpress-plugin">
     <vulnerability>
       <title>ofc_upload_image.php Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/24492/</reference>
-      <reference>http://secunia.com/advisories/37903</reference>
-      <cve>2009-4140</cve>
+      <references>
+        <exploitdb>24492</exploitdb>
+        <secunia>37903</secunia>
+        <cve>2009-4140</cve>
+      </references>
       <type>UPLOAD</type>
       <fixed_in>0.5</fixed_in>
     </vulnerability>
@@ -4476,7 +5626,9 @@
   <plugin name="spamtask">
     <vulnerability>
       <title>ofc_upload_image.php Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/24492/</reference>
+      <references>
+        <exploitdb>24492</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -4484,7 +5636,9 @@
   <plugin name="php-analytics">
     <vulnerability>
       <title>ofc_upload_image.php Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/24492/</reference>
+      <references>
+        <exploitdb>24492</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -4492,7 +5646,9 @@
   <plugin name="seo-spy-google-wordpress-plugin">
     <vulnerability>
       <title>ofc_upload_image.php Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/24492/</reference>
+      <references>
+        <exploitdb>24492</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -4500,7 +5656,9 @@
   <plugin name="wp-seo-spy-google">
     <vulnerability>
       <title>ofc_upload_image.php Arbitrary File Upload Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/24492/</reference>
+      <references>
+        <exploitdb>24492</exploitdb>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
@@ -4508,7 +5666,10 @@
   <plugin name="podpress">
     <vulnerability>
       <title>podPress 8.8.10.13 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.com/files/121011/WordPress-podPress-8.8.10.13-Cross-Site-Scripting.html</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/121011/WordPress-podPress-8.8.10.13-Cross-Site-Scripting.html
+        </url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4516,7 +5677,9 @@
   <plugin name="fbsurveypro">
     <vulnerability>
       <title>fbsurveypro XSS Vulnerability</title>
-      <reference>http://1337day.com/exploit/20623</reference>
+      <references>
+        <url>http://1337day.com/exploit/20623</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4524,7 +5687,9 @@
   <plugin name="timelineoptinpro">
     <vulnerability>
       <title>timelineoptinpro XSS Vulnerability</title>
-      <reference>http://1337day.com/exploit/20620</reference>
+      <references>
+        <url>http://1337day.com/exploit/20620</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4532,7 +5697,9 @@
   <plugin name="kioskprox">
     <vulnerability>
       <title>kioskprox XSS Vulnerability</title>
-      <reference>http://1337day.com/exploit/20624</reference>
+      <references>
+        <url>http://1337day.com/exploit/20624</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4540,7 +5707,9 @@
   <plugin name="bigcontact">
     <vulnerability>
       <title>bigcontact SQLI</title>
-      <reference>http://plugins.trac.wordpress.org/changeset/689798</reference>
+      <references>
+        <url>http://plugins.trac.wordpress.org/changeset/689798</url>
+      </references>
       <type>SQLI</type>
       <fixed_in>1.4.7</fixed_in>
     </vulnerability>
@@ -4549,7 +5718,9 @@
   <plugin name="drawblog">
     <vulnerability>
       <title>drawblog CSRF</title>
-      <reference>http://plugins.trac.wordpress.org/changeset/691178</reference>
+      <references>
+        <url>http://plugins.trac.wordpress.org/changeset/691178</url>
+      </references>
       <type>CSRF</type>
       <fixed_in>0.81</fixed_in>
     </vulnerability>
@@ -4558,8 +5729,11 @@
   <plugin name="social-media-widget">
     <vulnerability>
       <title>social-media-widget malicious code</title>
-      <reference>http://plugins.trac.wordpress.org/changeset?reponame=&amp;old=691839%40social-media-widget%2Ftrunk&amp;new=693941%40social-media-widget%2Ftrunk</reference>
-      <reference>http://slashdot.org/submission/2592777/top-wordpress-widget-sold-off-turned-into-seo-spambot</reference>
+      <references>
+        <url>http://plugins.trac.wordpress.org/changeset?reponame=&amp;old=691839%40social-media-widget%2Ftrunk&amp;new=693941%40social-media-widget%2Ftrunk</url>
+        <url>http://slashdot.org/submission/2592777/top-wordpress-widget-sold-off-turned-into-seo-spambot
+        </url>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>4.0.2</fixed_in>
     </vulnerability>
@@ -4568,8 +5742,10 @@
   <plugin name="facebook-members">
     <vulnerability>
       <title>facebook-members CSRF</title>
-      <reference>https://secunia.com/advisories/52962/</reference>
-      <cve>2013-2703</cve>
+      <references>
+        <secunia>52962</secunia>
+        <cve>2013-2703</cve>
+      </references>
       <type>CSRF</type>
       <fixed_in>5.0.5</fixed_in>
     </vulnerability>
@@ -4578,8 +5754,10 @@
   <plugin name="foursquare-checkins">
     <vulnerability>
       <title>foursquare-checkins CSRF</title>
-      <reference>https://secunia.com/advisories/53151/</reference>
-      <cve>2013-2709</cve>
+      <references>
+        <secunia>53151</secunia>
+        <cve>2013-2709</cve>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.3</fixed_in>
     </vulnerability>
@@ -4588,7 +5766,9 @@
   <plugin name="formidable">
     <vulnerability>
       <title>formidable Pro Unspecified Vulnerabilities</title>
-      <reference>https://secunia.com/advisories/53121/</reference>
+      <references>
+        <secunia>53121</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>1.06.09</fixed_in>
     </vulnerability>
@@ -4597,8 +5777,10 @@
   <plugin name="all-in-one-webmaster">
     <vulnerability>
       <title>all-in-one-webmaster CSRF</title>
-      <reference>https://secunia.com/advisories/52877/</reference>
-      <cve>2013-2696</cve>
+      <references>
+        <secunia>52877</secunia>
+        <cve>2013-2696</cve>
+      </references>
       <type>CSRF</type>
       <fixed_in>8.2.4</fixed_in>
     </vulnerability>
@@ -4607,7 +5789,9 @@
   <plugin name="background-music">
     <vulnerability>
       <title>background-music 1.0 jPlayer.swf XSS</title>
-      <reference>https://secunia.com/advisories/53057/</reference>
+      <references>
+        <secunia>53057</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4615,7 +5799,9 @@
   <plugin name="haiku-minimalist-audio-player">
     <vulnerability>
       <title>haiku-minimalist-audio-player &lt;= 1.0.0 jPlayer.swf XSS</title>
-      <reference>https://secunia.com/advisories/51336/</reference>
+      <references>
+        <secunia>51336</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4623,7 +5809,9 @@
   <plugin name="jammer">
     <vulnerability>
       <title>jammer &lt;= 0.2 jPlayer.swf XSS</title>
-      <reference>https://secunia.com/advisories/53106/</reference>
+      <references>
+        <secunia>53106</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4631,7 +5819,9 @@
   <plugin name="syntaxhighlighter">
     <vulnerability>
       <title>syntaxhighlighter clipboard.swf XSS</title>
-      <reference>https://secunia.com/advisories/53235/</reference>
+      <references>
+        <secunia>53235</secunia>
+      </references>
       <type>XSS</type>
       <fixed_in>3.1.6</fixed_in>
     </vulnerability>
@@ -4640,7 +5830,9 @@
   <plugin name="top-10">
     <vulnerability>
       <title>top-10 CSRF</title>
-      <reference>https://secunia.com/advisories/53205/</reference>
+      <references>
+        <secunia>53205</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.9.3</fixed_in>
     </vulnerability>
@@ -4649,8 +5841,10 @@
   <plugin name="easy-adsense-lite">
     <vulnerability>
       <title>easy-adsense-lite CSRF</title>
-      <reference>https://secunia.com/advisories/52953/</reference>
-      <cve>2013-2702</cve>
+      <references>
+        <secunia>52953</secunia>
+        <cve>2013-2702</cve>
+      </references>
       <type>CSRF</type>
       <fixed_in>6.10</fixed_in>
     </vulnerability>
@@ -4659,16 +5853,20 @@
   <plugin name="uk-cookie">
     <vulnerability>
       <title>uk-cookie plugin XSS</title>
-      <reference>http://osvdb.org/87561</reference>
-      <reference>http://seclists.org/bugtraq/2012/Nov/50</reference>
-      <cve>2012-5856</cve>
+      <references>
+        <osvdb>87561</osvdb>
+        <url>http://seclists.org/bugtraq/2012/Nov/50</url>
+        <cve>2012-5856</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>uk-cookie CSRF</title>
-      <reference>http://www.openwall.com/lists/oss-security/2013/06/06/10</reference>
-      <reference>http://osvdb.org/94032</reference>
-      <cve>2013-2180</cve>
+      <references>
+        <url>http://www.openwall.com/lists/oss-security/2013/06/06/10</url>
+        <osvdb>94032</osvdb>
+        <cve>2013-2180</cve>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -4676,13 +5874,15 @@
   <plugin name="wp-cleanfix">
     <vulnerability>
       <title>wp-cleanfix Remote Command Execution, CSRF and XSS</title>
-      <reference>https://github.com/wpscanteam/wpscan/issues/186</reference>
-      <reference>http://wordpress.org/support/topic/plugin-wp-cleanfix-remote-code-execution-warning</reference>
-      <reference>http://osvdb.org/93450</reference>
-      <reference>http://secunia.com/advisories/53395/</reference>
-      <reference>http://osvdb.org/93468</reference>
-      <cve>2013-2108</cve>
-      <cve>2013-2109</cve>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/issues/186</url>
+        <url>http://wordpress.org/support/topic/plugin-wp-cleanfix-remote-code-execution-warning</url>
+        <osvdb>93450</osvdb>
+        <secunia>53395</secunia>
+        <osvdb>93468</osvdb>
+        <cve>2013-2108</cve>
+        <cve>2013-2109</cve>
+      </references>
       <type>MULTI</type>
       <fixed_in>3.0.2</fixed_in>
     </vulnerability>
@@ -4691,17 +5891,22 @@
   <plugin name="mail-on-update">
     <vulnerability>
       <title>mail-on-update plugin CSRF</title>
-      <reference>http://secunia.com/advisories/53449/</reference>
-      <reference>http://www.openwall.com/lists/oss-security/2013/05/16/8</reference>
+      <references>
+        <secunia>53449</secunia>
+        <url>http://www.openwall.com/lists/oss-security/2013/05/16/8</url>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
 
   <plugin name="advanced-xml-reader">
     <vulnerability>
-      <title>Advanced XML Reader Plugin for WordPress XML External Entity (XXE) Data Parsing Arbitrary File Disclosure</title>
-      <reference>http://seclists.org/bugtraq/2013/May/5</reference>
-      <reference>http://osvdb.org/92904</reference>
+      <title>Advanced XML Reader Plugin for WordPress XML External Entity (XXE) Data Parsing Arbitrary File Disclosure
+      </title>
+      <references>
+        <url>http://seclists.org/bugtraq/2013/May/5</url>
+        <osvdb>92904</osvdb>
+      </references>
       <type>XXE</type>
     </vulnerability>
   </plugin>
@@ -4709,7 +5914,9 @@
   <plugin name="related-posts-by-zemanta">
     <vulnerability>
       <title>WordPress Related Posts by Zemanta Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/53321/</reference>
+      <references>
+        <secunia>53321</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.3.2</fixed_in>
     </vulnerability>
@@ -4718,7 +5925,9 @@
   <plugin name="wordpress-23-related-posts-plugin">
     <vulnerability>
       <title>WordPress WordPress Related Posts Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/53279/</reference>
+      <references>
+        <secunia>53279</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>2.6.2</fixed_in>
     </vulnerability>
@@ -4727,7 +5936,9 @@
   <plugin name="related-posts">
     <vulnerability>
       <title>WordPress Related Posts Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/53122/</reference>
+      <references>
+        <secunia>53122</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>2.7.2</fixed_in>
     </vulnerability>
@@ -4736,7 +5947,9 @@
   <plugin name="wp-print-friendly">
     <vulnerability>
       <title>WordPress WP Print Friendly Plugin Security Bypass Vulnerability</title>
-      <reference>http://secunia.com/advisories/53371/</reference>
+      <references>
+        <secunia>53371</secunia>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>0.5.3</fixed_in>
     </vulnerability>
@@ -4745,7 +5958,9 @@
   <plugin name="contextual-related-posts">
     <vulnerability>
       <title>WordPress Contextual Related Posts Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/52960/</reference>
+      <references>
+        <secunia>52960</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.8.7</fixed_in>
     </vulnerability>
@@ -4754,7 +5969,9 @@
   <plugin name="calendar">
     <vulnerability>
       <title>WordPress Calendar Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/52841/</reference>
+      <references>
+        <secunia>52841</secunia>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.3.3</fixed_in>
     </vulnerability>
@@ -4763,7 +5980,9 @@
   <plugin name="feedweb">
     <vulnerability>
       <title>WordPress Feedweb Plugin 'wp_post_id' Parameter XSS</title>
-      <reference>http://www.securityfocus.com/bid/58771</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/58771</url>
+      </references>
       <type>XSS</type>
       <fixed_in>1.9</fixed_in>
     </vulnerability>
@@ -4772,7 +5991,9 @@
   <plugin name="wp-print">
     <vulnerability>
       <title>WordPress WP-Print Plugin CSRF</title>
-      <reference>http://www.securityfocus.com/bid/58900</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/58900</url>
+      </references>
       <type>CSRF</type>
       <fixed_in>2.52</fixed_in>
     </vulnerability>
@@ -4781,7 +6002,9 @@
   <plugin name="trafficanalyzer">
     <vulnerability>
       <title>WordPress WP-Print Plugin CSRF</title>
-      <reference>http://packetstorm.wowhacker.com/1304-exploits/wptrafficanalyzer-xss.txt</reference>
+      <references>
+        <url>http://packetstorm.wowhacker.com/1304-exploits/wptrafficanalyzer-xss.txt</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4789,7 +6012,9 @@
   <plugin name="wp-download-manager">
     <vulnerability>
       <title>WordPress WP-DownloadManager Plugin CSRF</title>
-      <reference>http://www.securityfocus.com/bid/58937</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/58937</url>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.61</fixed_in>
     </vulnerability>
@@ -4798,9 +6023,11 @@
   <plugin name="digg-digg">
     <vulnerability>
       <title>Digg Digg CSRF</title>
-      <reference>http://wordpress.org/plugins/digg-digg/changelog/</reference>
-      <reference>http://secunia.com/advisories/53120/</reference>
-      <reference>http://osvdb.org/93544</reference>
+      <references>
+        <url>http://wordpress.org/plugins/digg-digg/changelog/</url>
+        <secunia>53120</secunia>
+        <osvdb>93544</osvdb>
+      </references>
       <type>CSRF</type>
       <fixed_in>5.3.5</fixed_in>
     </vulnerability>
@@ -4809,9 +6036,11 @@
   <plugin name="ssquiz">
     <vulnerability>
       <title>SS Quiz Plugin Multiple Unspecified Vulnerabilities</title>
-      <reference>http://wordpress.org/plugins/ssquiz/changelog/</reference>
-      <reference>http://secunia.com/advisories/53378/</reference>
-      <reference>http://osvdb.org/93531</reference>
+      <references>
+        <url>http://wordpress.org/plugins/ssquiz/changelog/</url>
+        <secunia>53378</secunia>
+        <osvdb>93531</osvdb>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>2.0</fixed_in>
     </vulnerability>
@@ -4820,7 +6049,9 @@
   <plugin name="funcaptcha">
     <vulnerability>
       <title>FunCaptcha CSRF</title>
-      <reference>http://wordpress.org/extend/plugins/funcaptcha/changelog/</reference>
+      <references>
+        <url>http://wordpress.org/extend/plugins/funcaptcha/changelog/</url>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>0.33</fixed_in>
     </vulnerability>
@@ -4829,7 +6060,9 @@
   <plugin name="xili-language">
     <vulnerability>
       <title>xili-language XSS</title>
-      <reference>http://wordpress.org/plugins/xili-language/changelog/</reference>
+      <references>
+        <url>http://wordpress.org/plugins/xili-language/changelog/</url>
+      </references>
       <type>XSS</type>
       <fixed_in>2.8.6</fixed_in>
     </vulnerability>
@@ -4838,7 +6071,9 @@
   <plugin name="wordpress-seo">
     <vulnerability>
       <title>Security issue which allowed any user to reset settings</title>
-      <reference>http://wordpress.org/plugins/wordpress-seo/changelog/</reference>
+      <references>
+        <url>http://wordpress.org/plugins/wordpress-seo/changelog/</url>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>1.4.5</fixed_in>
     </vulnerability>
@@ -4847,10 +6082,12 @@
   <plugin name="underconstruction">
     <vulnerability>
       <title>CSRF in WordPress underConstruction plugin</title>
-      <reference>http://wordpress.org/plugins/underconstruction/changelog/</reference>
-      <reference>http://secunia.com/advisories/52881/</reference>
-      <reference>http://osvdb.org/93857</reference>
-      <cve>2013-2699</cve>
+      <references>
+        <url>http://wordpress.org/plugins/underconstruction/changelog/</url>
+        <secunia>52881</secunia>
+        <osvdb>93857</osvdb>
+        <cve>2013-2699</cve>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.09</fixed_in>
     </vulnerability>
@@ -4859,9 +6096,12 @@
   <plugin name="adif-log-search-widget">
     <vulnerability>
       <title>ADIF Log Search Widget XSS Arbitrary Vulnerability</title>
-      <reference>http://packetstormsecurity.com/files/121777/ADIF-Log-Search-Widget-1.0e-Cross-Site-Scripting.html</reference>
-      <reference>http://secunia.com/advisories/53599/</reference>
-      <reference>http://osvdb.org/93721</reference>
+      <references>
+        <url>http://packetstormsecurity.com/files/121777/ADIF-Log-Search-Widget-1.0e-Cross-Site-Scripting.html
+        </url>
+        <secunia>53599</secunia>
+        <osvdb>93721</osvdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -4869,8 +6109,10 @@
   <plugin name="exploit-scanner">
     <vulnerability>
       <title>FPD and Security bypass vulnerabilities in Exploit Scanner for WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2013/May/216</reference>
-      <reference>http://osvdb.org/93799</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/May/216</url>
+        <osvdb>93799</osvdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -4878,7 +6120,9 @@
   <plugin name="ga-universal">
     <vulnerability>
       <title>FPD and Security bypass vulnerabilities in Exploit Scanner for WordPress</title>
-      <reference>http://wordpress.org/plugins/ga-universal/changelog/</reference>
+      <references>
+        <url>http://wordpress.org/plugins/ga-universal/changelog/</url>
+      </references>
       <type>XSS</type>
       <fixed_in>1.0.1</fixed_in>
     </vulnerability>
@@ -4887,8 +6131,10 @@
   <plugin name="export-to-text">
     <vulnerability>
       <title>Remote File Inclusion Vulnerability</title>
-      <reference>http://secunia.com/advisories/51348/</reference>
-      <reference>http://osvdb.org/93715</reference>
+      <references>
+        <secunia>51348</secunia>
+        <osvdb>93715</osvdb>
+      </references>
       <type>RFI</type>
       <fixed_in>2.3</fixed_in>
     </vulnerability>
@@ -4897,8 +6143,10 @@
   <plugin name="qtranslate">
     <vulnerability>
       <title>WordPress qTranslate Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/53126/</reference>
-      <reference>http://osvdb.org/93873</reference>
+      <references>
+        <secunia>53126</secunia>
+        <osvdb>93873</osvdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -4906,8 +6154,10 @@
   <plugin name="image-slider-with-description">
     <vulnerability>
       <title>Image slider with description Plugin Unspecified Vulnerability</title>
-      <reference>http://secunia.com/advisories/53588/</reference>
-      <reference>http://osvdb.org/93691</reference>
+      <references>
+        <secunia>53588</secunia>
+        <osvdb>93691</osvdb>
+      </references>
       <type>UNKNOWN</type>
       <fixed_in>7.0</fixed_in>
     </vulnerability>
@@ -4916,9 +6166,11 @@
   <plugin name="user-role-editor">
     <vulnerability>
       <title>User Role Editor Plugin Cross-Site Request Forgery Vulnerability</title>
-      <reference>http://secunia.com/advisories/53593/</reference>
-      <reference>http://osvdb.org/93699</reference>
-      <reference>http://www.exploit-db.com/exploits/25721</reference>
+      <references>
+        <secunia>53593</secunia>
+        <osvdb>93699</osvdb>
+        <exploitdb>25721</exploitdb>
+      </references>
       <type>CSRF</type>
       <fixed_in>3.14</fixed_in>
     </vulnerability>
@@ -4927,18 +6179,22 @@
   <plugin name="eelv-newsletter">
     <vulnerability>
       <title>EELV Newsletter Plugin Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53546/</reference>
-      <reference>http://osvdb.org/93685</reference>
+      <references>
+        <secunia>53546</secunia>
+        <osvdb>93685</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>3.3.1</fixed_in>
     </vulnerability>
   </plugin>
 
-   <plugin name="frontier-post">
+  <plugin name="frontier-post">
     <vulnerability>
       <title>Frontier Post Plugin Publishing Posts Security Bypass</title>
-      <reference>http://secunia.com/advisories/53474/</reference>
-      <reference>http://osvdb.org/93639</reference>
+      <references>
+        <secunia>53474</secunia>
+        <osvdb>93639</osvdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
@@ -4946,14 +6202,16 @@
   <plugin name="spider-catalog">
     <vulnerability>
       <title>Spider Catalog Plugin Cross-Site Scripting and SQL Injection Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/53491/</reference>
-      <reference>http://osvdb.org/93591</reference>
-      <reference>http://osvdb.org/93593</reference>
-      <reference>http://osvdb.org/93594</reference>
-      <reference>http://osvdb.org/93595</reference>
-      <reference>http://osvdb.org/93596</reference>
-      <reference>http://osvdb.org/93597</reference>
-      <reference>http://osvdb.org/93598</reference>
+      <references>
+        <secunia>53491</secunia>
+        <osvdb>93591</osvdb>
+        <osvdb>93593</osvdb>
+        <osvdb>93594</osvdb>
+        <osvdb>93595</osvdb>
+        <osvdb>93596</osvdb>
+        <osvdb>93597</osvdb>
+        <osvdb>93598</osvdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -4961,13 +6219,15 @@
   <plugin name="spider-event-calendar">
     <vulnerability>
       <title>Spider Event Calendar Plugin Security Bypass, Cross-Site Scripting and SQLi Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/53481/</reference>
-      <reference>http://osvdb.org/93584</reference>
-      <reference>http://osvdb.org/93585</reference>
-      <reference>http://osvdb.org/93586</reference>
-      <reference>http://osvdb.org/93587</reference>
-      <reference>http://osvdb.org/93588</reference>
-      <reference>http://osvdb.org/93582</reference>
+      <references>
+        <secunia>53481</secunia>
+        <osvdb>93584</osvdb>
+        <osvdb>93585</osvdb>
+        <osvdb>93586</osvdb>
+        <osvdb>93587</osvdb>
+        <osvdb>93588</osvdb>
+        <osvdb>93582</osvdb>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -4975,7 +6235,9 @@
   <plugin name="antivirus">
     <vulnerability>
       <title>FPD and Security bypass vulnerabilities in AntiVirus for WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Jun/0</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Jun/0</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
@@ -4983,7 +6245,9 @@
   <plugin name="wp-maintenance-mode">
     <vulnerability>
       <title>WP Maintenance Mode Setting Manipulation CSRF</title>
-      <reference>http://osvdb.org/94450</reference>
+      <references>
+        <osvdb>94450</osvdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -4991,7 +6255,9 @@
   <plugin name="ultimate-auction">
     <vulnerability>
       <title>ultimate Auction Auction Creation CSRF</title>
-      <reference>http://osvdb.org/94407</reference>
+      <references>
+        <osvdb>94407</osvdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -4999,17 +6265,21 @@
   <plugin name="mapsmarker">
     <vulnerability>
       <title>Leaflet Maps Marker Tag Multiple Parameter SQL Injection</title>
-      <reference>http://osvdb.org/94388</reference>
+      <references>
+        <osvdb>94388</osvdb>
+      </references>
       <type>SQLI</type>
       <fixed_in>3.5.4</fixed_in>
     </vulnerability>
   </plugin>
 
-   <plugin name="xorbin-analog-flash-clock">
+  <plugin name="xorbin-analog-flash-clock">
     <vulnerability>
       <title>Xorbin Analog Flash Clock 1.0 Flash-based XSS</title>
-      <reference>http://advisory.prakharprasad.com/xorbin_afc_wp.txt</reference>
-      <cve>2013-4692</cve>
+      <references>
+        <url>http://advisory.prakharprasad.com/xorbin_afc_wp.txt</url>
+        <cve>2013-4692</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -5017,8 +6287,10 @@
   <plugin name="xorbin-digital-flash-clock">
     <vulnerability>
       <title>Xorbin Digital Flash Clock 1.0 Flash-based XSS</title>
-      <reference>http://advisory.prakharprasad.com/xorbin_dfc_wp.txt</reference>
-      <cve>2013-4693</cve>
+      <references>
+        <url>http://advisory.prakharprasad.com/xorbin_dfc_wp.txt</url>
+        <cve>2013-4693</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -5026,15 +6298,20 @@
   <plugin name="dropdown-menu-widget">
     <vulnerability>
       <title>Dropdown Menu Widget Script Insertion CSRF</title>
-      <reference>http://osvdb.org/94771</reference>
+      <references>
+        <osvdb>94771</osvdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
 
   <plugin name="buddypress-extended-friendship-request">
     <vulnerability>
-      <title>BuddyPress Extended Friendship Request wp-admin/admin-ajax.php friendship_request_message Parameter XSS</title>
-      <reference>http://osvdb.org/94807</reference>
+      <title>BuddyPress Extended Friendship Request wp-admin/admin-ajax.php friendship_request_message Parameter XSS
+      </title>
+      <references>
+        <osvdb>94807</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>1.0.2</fixed_in>
     </vulnerability>
@@ -5043,7 +6320,9 @@
   <plugin name="wp-private-messages">
     <vulnerability>
       <title>wp-private-messages /wp-admin/profile.php msgid Parameter SQL Injection</title>
-      <reference>http://osvdb.org/94702</reference>
+      <references>
+        <osvdb>94702</osvdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
@@ -5051,7 +6330,9 @@
   <plugin name="stream-video-player">
     <vulnerability>
       <title>Stream Video Player Plugin for WordPress Setting Manipulation CSRF</title>
-      <reference>http://osvdb.org/94466</reference>
+      <references>
+        <osvdb>94466</osvdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
   </plugin>
@@ -5059,8 +6340,10 @@
   <plugin name="duplicator">
     <vulnerability>
       <title>Duplicator installer.cleanup.php package Parameter XSS</title>
-      <reference>http://osvdb.org/95627</reference>
-      <cve>2013-4625</cve>
+      <references>
+        <osvdb>95627</osvdb>
+        <cve>2013-4625</cve>
+      </references>
       <type>XSS</type>
       <fixed_in>0.4.5</fixed_in>
     </vulnerability>
@@ -5069,17 +6352,21 @@
   <plugin name="citizen-space">
     <vulnerability>
       <title>Citizen Space Script Insertion CSRF</title>
-      <reference>http://osvdb.org/95570</reference>
+      <references>
+        <osvdb>95570</osvdb>
+      </references>
       <type>CSRF</type>
       <fixed_in>1.1</fixed_in>
     </vulnerability>
   </plugin>
 
-   <plugin name="spicy-blogroll">
+  <plugin name="spicy-blogroll">
     <vulnerability>
       <title>Spicy Blogroll spicy-blogroll-ajax.php Multiple Parameter Remote File Inclusion</title>
-      <reference>http://osvdb.org/95557</reference>
-      <reference>www.exploit-db.com/exploits/26804</reference>
+      <references>
+        <osvdb>95557</osvdb>
+        <exploitdb>26804</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </plugin>
@@ -5087,7 +6374,9 @@
   <plugin name="pie-register">
     <vulnerability>
       <title>Pie Register wp-login.php Multiple Parameter XSS</title>
-      <reference>http://osvdb.org/95160</reference>
+      <references>
+        <osvdb>95160</osvdb>
+      </references>
       <type>XSS</type>
       <fixed_in>1.31</fixed_in>
     </vulnerability>
@@ -5096,8 +6385,10 @@
   <plugin name="xhanch-my-twitter">
     <vulnerability>
       <title>CSRF in admin/setting.php in Xhanch</title>
-      <reference>http://secunia.com/advisories/53133</reference>
-      <cve>2013-3253</cve>
+      <references>
+        <secunia>53133</secunia>
+        <cve>2013-3253</cve>
+      </references>
       <type>CSRF</type>
       <fixed_in>2.7.7</fixed_in>
     </vulnerability>
@@ -5106,8 +6397,10 @@
   <plugin name="sexybookmarks">
     <vulnerability>
       <title>CSRF in sexybookmarks</title>
-      <reference>http://wordpress.org/plugins/sexybookmarks/changelog/</reference>
-      <cve>2013-3256</cve>
+      <references>
+        <url>http://wordpress.org/plugins/sexybookmarks/changelog/</url>
+        <cve>2013-3256</cve>
+      </references>
       <type>CSRF</type>
       <fixed_in>6.1.5.0</fixed_in>
     </vulnerability>
diff --git a/data/theme_vulns.xml b/data/theme_vulns.xml
index 38bcee97..7923a981 100644
--- a/data/theme_vulns.xml
+++ b/data/theme_vulns.xml
@@ -6,60 +6,74 @@
   <theme name="crius">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53427/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/77</reference>
+      <references>
+        <secunia>53427</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/77</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
-  
+
   <theme name="source">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53457/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/77</reference>
+      <references>
+        <secunia>53457</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/77</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
-  
+
   <theme name="i-love-it">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53548/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/77</reference>
+      <references>
+        <secunia>53548</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/77</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
-  
+
   <theme name="smartstart">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53460/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/77</reference>
+      <references>
+        <secunia>53460</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/77</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
-  
+
   <theme name="covertvideopress">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/53494/</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/May/77</reference>
+      <references>
+        <secunia>53494</secunia>
+        <url>http://seclists.org/fulldisclosure/2013/May/77</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
-  
+
   <theme name="photolio">
     <vulnerability>
       <title>VideoJS Cross-Site Scripting Vulnerability</title>
-      <reference>http://seclists.org/fulldisclosure/2013/May/77</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/May/77</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
-  
+
   <theme name="onepagewebsite">
     <vulnerability>
       <title>onepagewebsite Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20027</reference>
+      <references>
+        <url>http://1337day.com/exploit/20027</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </theme>
@@ -67,7 +81,9 @@
   <theme name="vithy">
     <vulnerability>
       <title>vithy Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20040</reference>
+      <references>
+        <url>http://1337day.com/exploit/20040</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </theme>
@@ -75,7 +91,9 @@
   <theme name="appius">
     <vulnerability>
       <title>appius Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20039</reference>
+      <references>
+        <url>http://1337day.com/exploit/20039</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </theme>
@@ -83,7 +101,9 @@
   <theme name="yvora">
     <vulnerability>
       <title>yvora Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20038</reference>
+      <references>
+        <url>http://1337day.com/exploit/20038</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </theme>
@@ -91,7 +111,9 @@
   <theme name="shotzz">
     <vulnerability>
       <title>shotzz Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20041</reference>
+      <references>
+        <url>http://1337day.com/exploit/20041</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </theme>
@@ -99,12 +121,16 @@
   <theme name="moneymasters">
     <vulnerability>
       <title>moneymasters Full Path Disclosure vulnerability</title>
-      <reference>http://1337day.com/exploit/20077</reference>
+      <references>
+        <url>http://1337day.com/exploit/20077</url>
+      </references>
       <type>FPD</type>
     </vulnerability>
     <vulnerability>
       <title>moneymasters File Upload Vulnerability (metasploit)</title>
-      <reference>http://1337day.com/exploit/20076</reference>
+      <references>
+        <url>http://1337day.com/exploit/20076</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </theme>
@@ -112,7 +138,9 @@
   <theme name="ovum">
     <vulnerability>
       <title>XSS vulnerability in Imediapixel premium WordPress themes</title>
-      <reference>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-imediapixel.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-imediapixel.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -120,7 +148,9 @@
   <theme name="avanix">
     <vulnerability>
       <title>XSS vulnerability in Imediapixel premium WordPress themes</title>
-      <reference>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-imediapixel.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-imediapixel.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -128,7 +158,9 @@
   <theme name="ebiz">
     <vulnerability>
       <title>XSS vulnerability in Imediapixel premium WordPress themes</title>
-      <reference>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-imediapixel.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-imediapixel.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -136,7 +168,9 @@
   <theme name="ecobiz">
     <vulnerability>
       <title>XSS vulnerability in Imediapixel premium WordPress themes</title>
-      <reference>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-imediapixel.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-imediapixel.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -144,7 +178,9 @@
   <theme name="traject">
     <vulnerability>
       <title>XSS vulnerability in Parallelus premium WordPress themes</title>
-      <reference>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-parallelus-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-parallelus-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -152,7 +188,9 @@
   <theme name="intersect">
     <vulnerability>
       <title>XSS vulnerability in Parallelus premium WordPress themes</title>
-      <reference>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-parallelus-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-parallelus-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -160,7 +198,9 @@
   <theme name="salutation">
     <vulnerability>
       <title>XSS vulnerability in Parallelus premium WordPress themes</title>
-      <reference>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-parallelus-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-parallelus-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -168,7 +208,9 @@
   <theme name="unite">
     <vulnerability>
       <title>XSS vulnerability in Parallelus premium WordPress themes</title>
-      <reference>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-parallelus-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-parallelus-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -176,7 +218,9 @@
   <theme name="shapeless">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -184,7 +228,9 @@
   <theme name="brisk">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -192,7 +238,9 @@
   <theme name="blaze">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -200,7 +248,9 @@
   <theme name="eunice">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -208,7 +258,9 @@
   <theme name="explicit">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -216,7 +268,9 @@
   <theme name="essence">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -224,7 +278,9 @@
   <theme name="paramount">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -232,7 +288,9 @@
   <theme name="picturefactory">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -240,7 +298,9 @@
   <theme name="sparky">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -248,7 +308,9 @@
   <theme name="theagency">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -256,7 +318,9 @@
   <theme name="konzept">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -264,7 +328,9 @@
   <theme name="daisho">
     <vulnerability>
       <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
-      <reference>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</reference>
+      <references>
+        <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -272,7 +338,9 @@
   <theme name="wise">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -280,7 +348,9 @@
   <theme name="webfolio">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -288,7 +358,9 @@
   <theme name="colorbold">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -296,7 +368,9 @@
   <theme name="rockwell">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -304,7 +378,9 @@
   <theme name="xmas">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -312,7 +388,9 @@
   <theme name="designpile">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -320,7 +398,9 @@
   <theme name="alltuts">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -328,7 +408,9 @@
   <theme name="boldy">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -336,7 +418,9 @@
   <theme name="simplo">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -344,7 +428,9 @@
   <theme name="diary">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -352,7 +438,9 @@
   <theme name="journalcrunch">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -360,7 +448,9 @@
   <theme name="prosume">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>
-      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/114750/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </theme>
@@ -368,7 +458,9 @@
   <theme name="famous">
     <vulnerability>
       <title>WordPress Famous Theme 2.0.5 Shell Upload</title>
-      <reference>http://packetstormsecurity.org/files/113842/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113842/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </theme>
@@ -376,7 +468,9 @@
   <theme name="deep-blue">
     <vulnerability>
       <title>WordPress Deep-Blue Theme 1.9.2 Arbitrary File Upload Vulnerability</title>
-      <reference>http://packetstormsecurity.org/files/113843/</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113843/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </theme>
@@ -384,8 +478,10 @@
   <theme name="classipress">
     <vulnerability>
       <title>WordPress Classipress Theme &lt;= 3.1.4 Stored XSS</title>
-      <reference>http://www.exploit-db.com/exploits/18053/</reference>
-      <reference>http://cxsecurity.com/issue/WLB-2011110001</reference>
+      <references>
+        <exploitdb>18053</exploitdb>
+        <url>http://cxsecurity.com/issue/WLB-2011110001</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -393,7 +489,9 @@
   <theme name="merchant">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -401,7 +499,9 @@
   <theme name="smpl">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -409,7 +509,9 @@
   <theme name="drawar">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -417,7 +519,9 @@
   <theme name="sentient">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -425,7 +529,9 @@
   <theme name="whitelight">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -433,7 +539,9 @@
   <theme name="unsigned">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -441,7 +549,9 @@
   <theme name="shelflife">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -449,7 +559,9 @@
   <theme name="olya">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -457,7 +569,9 @@
   <theme name="sliding">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -465,7 +579,9 @@
   <theme name="beveled">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -473,7 +589,9 @@
   <theme name="empire-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -481,7 +599,9 @@
   <theme name="buro-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -489,7 +609,9 @@
   <theme name="briefed-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -497,7 +619,9 @@
   <theme name="wikeasi">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -505,7 +629,9 @@
   <theme name="currents">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -513,7 +639,9 @@
   <theme name="emporium">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -521,7 +649,9 @@
   <theme name="biznizz-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -529,7 +659,9 @@
   <theme name="kaboodle-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -537,7 +669,9 @@
   <theme name="inspire-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -545,7 +679,9 @@
   <theme name="teamster">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -553,7 +689,9 @@
   <theme name="argentum">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -561,7 +699,9 @@
   <theme name="statua-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -569,7 +709,9 @@
   <theme name="simplicity-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -577,7 +719,9 @@
   <theme name="canvas-commerce">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -585,7 +729,9 @@
   <theme name="wootique">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -593,7 +739,9 @@
   <theme name="woostore">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -601,7 +749,9 @@
   <theme name="coquette">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -609,7 +759,9 @@
   <theme name="buro">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -617,7 +769,9 @@
   <theme name="swatch">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -625,7 +779,9 @@
   <theme name="announcement">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -633,7 +789,9 @@
   <theme name="empire">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -641,7 +799,9 @@
   <theme name="supportpress">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -649,7 +809,9 @@
   <theme name="editorial">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -657,7 +819,9 @@
   <theme name="statua">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -665,7 +829,9 @@
   <theme name="briefed">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -673,7 +839,9 @@
   <theme name="faultpress">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -681,7 +849,9 @@
   <theme name="kaboodle">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -689,7 +859,9 @@
   <theme name="savinggrace">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -697,7 +869,9 @@
   <theme name="premiere">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -705,7 +879,9 @@
   <theme name="simplicity">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -713,7 +889,9 @@
   <theme name="deliciousmagazine">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -721,7 +899,9 @@
   <theme name="bookclub">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -729,7 +909,9 @@
   <theme name="boldnews">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -737,7 +919,9 @@
   <theme name="placeholder">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -745,7 +929,9 @@
   <theme name="biznizz">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -753,7 +939,9 @@
   <theme name="auld">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -761,7 +949,9 @@
   <theme name="listings">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -769,7 +959,9 @@
   <theme name="elefolio">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -777,7 +969,9 @@
   <theme name="chapters">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -785,7 +979,9 @@
   <theme name="continuum">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -793,7 +989,9 @@
   <theme name="diner">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -801,7 +999,9 @@
   <theme name="skeptical">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -809,7 +1009,9 @@
   <theme name="caffeinated">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -817,7 +1019,9 @@
   <theme name="crisp">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -825,7 +1029,9 @@
   <theme name="sealight">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -833,7 +1039,9 @@
   <theme name="estate">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -841,7 +1049,9 @@
   <theme name="tma">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -849,7 +1059,9 @@
   <theme name="coda">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -857,7 +1069,9 @@
   <theme name="inspire">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -865,7 +1079,9 @@
   <theme name="apz">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -873,7 +1089,9 @@
   <theme name="spectrum">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -881,7 +1099,9 @@
   <theme name="diarise">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -889,7 +1109,9 @@
   <theme name="boast">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -897,7 +1119,9 @@
   <theme name="retreat">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -905,7 +1129,9 @@
   <theme name="cityguide">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -913,7 +1139,9 @@
   <theme name="canvas">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -921,7 +1149,9 @@
   <theme name="postcard">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -929,7 +1159,9 @@
   <theme name="delegate">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -937,7 +1169,9 @@
   <theme name="mystream">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -945,7 +1179,9 @@
   <theme name="optimize">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -953,7 +1189,9 @@
   <theme name="backstage">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -961,7 +1199,9 @@
   <theme name="bueno">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -969,7 +1209,9 @@
   <theme name="digitalfarm">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -977,7 +1219,9 @@
   <theme name="headlines">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -985,7 +1229,9 @@
   <theme name="therapy">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -993,7 +1239,9 @@
   <theme name="rockstar">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1001,7 +1249,9 @@
   <theme name="dailyedition">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1009,7 +1259,9 @@
   <theme name="object">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1017,7 +1269,9 @@
   <theme name="coffeebreak">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1025,7 +1279,9 @@
   <theme name="mainstream">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1033,7 +1289,9 @@
   <theme name="featurepitch">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1041,7 +1299,9 @@
   <theme name="thejournal">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1049,7 +1309,9 @@
   <theme name="aperture">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1057,7 +1319,9 @@
   <theme name="metamorphosis">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1065,7 +1329,9 @@
   <theme name="bloggingstream">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1073,7 +1339,9 @@
   <theme name="thestation">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1081,7 +1349,9 @@
   <theme name="groovyvideo">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1089,7 +1359,9 @@
   <theme name="irresistible">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1097,7 +1369,9 @@
   <theme name="cushy">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1105,7 +1379,9 @@
   <theme name="wootube">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1113,7 +1389,9 @@
   <theme name="abstract">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1121,7 +1399,9 @@
   <theme name="busybee">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1129,7 +1409,9 @@
   <theme name="blogtheme">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1137,7 +1419,9 @@
   <theme name="typebased">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1145,7 +1429,9 @@
   <theme name="overeasy">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1153,7 +1439,9 @@
   <theme name="snapshot">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1161,7 +1449,9 @@
   <theme name="openair">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1169,7 +1459,9 @@
   <theme name="freshnews">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1177,7 +1469,9 @@
   <theme name="livewire">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1185,13 +1479,17 @@
   <theme name="flashnews">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
     <vulnerability>
       <title>Multiple vulnerabilities in Flash News theme for WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Feb/8</reference>
-      <reference>http://cxsecurity.com/issue/WLB-2013020010</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Feb/8</url>
+        <url>http://cxsecurity.com/issue/WLB-2013020010</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </theme>
@@ -1199,7 +1497,9 @@
   <theme name="gazette">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1207,7 +1507,9 @@
   <theme name="premiumnews">
     <vulnerability>
       <title>WooThemes WooFramework Remote Unauthenticated Shortcode Execution</title>
-      <reference>https://gist.github.com/2523147</reference>
+      <references>
+        <url>https://gist.github.com/2523147</url>
+      </references>
       <type>RCE</type>
     </vulnerability>
   </theme>
@@ -1215,12 +1517,16 @@
   <theme name="dt-chocolate">
     <vulnerability>
       <title>Wordpress dt-chocolate Theme Image Open redirect</title>
-      <reference>http://cxsecurity.com/issue/WLB-2013020011</reference>
+      <references>
+        <url>http://cxsecurity.com/issue/WLB-2013020011</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>Multiple vulnerabilities in Chocolate WP theme for WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Jan/215</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Jan/215</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </theme>
@@ -1228,7 +1534,9 @@
   <theme name="sandbox">
     <vulnerability>
       <title>Wordpress theme sandbox Arbitrary File Upload/FD Vulnerability</title>
-      <reference>http://1337day.com/exploit/20228</reference>
+      <references>
+        <url>http://1337day.com/exploit/20228</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </theme>
@@ -1236,7 +1544,9 @@
   <theme name="clockstone">
     <vulnerability>
       <title>WordPress Clockstone Theme upload.php Arbitrary File Upload Vulnerability</title>
-      <reference>http://secunia.com/advisories/51619/</reference>
+      <references>
+        <secunia>51619</secunia>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </theme>
@@ -1244,7 +1554,9 @@
   <theme name="archin">
     <vulnerability>
       <title>WordPress Archin Theme Cross-Site Scripting and Arbitrary File Upload Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50711/</reference>
+      <references>
+        <secunia>50711</secunia>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </theme>
@@ -1252,7 +1564,9 @@
   <theme name="purity">
     <vulnerability>
       <title>WordPress Purity Theme Multiple Cross-Site Scripting Vulnerabilities</title>
-      <reference>http://secunia.com/advisories/50627/</reference>
+      <references>
+        <secunia>50627</secunia>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1260,9 +1574,11 @@
   <theme name="pinboard">
     <vulnerability>
       <title>Wordpress theme pinboard 1.0.6 XSS</title>
-      <reference>http://secunia.com/advisories/52079/</reference>
-      <reference>http://seclists.org/oss-sec/2013/q1/274</reference>
-      <reference>http://cxsecurity.com/issue/WLB-2013020062</reference>
+      <references>
+        <secunia>52079</secunia>
+        <url>http://seclists.org/oss-sec/2013/q1/274</url>
+        <url>http://cxsecurity.com/issue/WLB-2013020062</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1270,7 +1586,9 @@
   <theme name="montezuma">
     <vulnerability>
       <title>montezuma &lt;= 1.1.3 XSS in ZeroClipboard.swf</title>
-      <reference>http://1337day.com/exploit/20396</reference>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1278,7 +1596,9 @@
   <theme name="scarlet">
     <vulnerability>
       <title>scarlet &lt;= 1.1.3 XSS in ZeroClipboard.swf</title>
-      <reference>http://1337day.com/exploit/20396</reference>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1286,7 +1606,9 @@
   <theme name="allure-real-estate-theme-for-placester">
     <vulnerability>
       <title>allure-real-estate-theme-for-placester &lt;= 0.1.1 XSS in ZeroClipboard.swf</title>
-      <reference>http://1337day.com/exploit/20396</reference>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1294,7 +1616,9 @@
   <theme name="allure-real-estate-theme-for-real-estate">
     <vulnerability>
       <title>allure-real-estate-theme-for-real-estate &lt;= 0.1.1 XSS in ZeroClipboard.swf</title>
-      <reference>http://1337day.com/exploit/20396</reference>
+      <references>
+        <url>http://1337day.com/exploit/20396</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1302,7 +1626,9 @@
   <theme name="felici">
     <vulnerability>
       <title>felici XSS Vulnerability</title>
-      <reference>http://1337day.com/exploit/20560</reference>
+      <references>
+        <url>http://1337day.com/exploit/20560</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1310,8 +1636,10 @@
   <theme name="classic">
     <vulnerability>
       <title>Classic v1.5 Theme PHP_SELF XSS</title>
-      <reference>http://osvdb.org/38450</reference>
-      <cve>2007-4483</cve>
+      <references>
+        <url>http://osvdb.org/38450</url>
+        <cve>2007-4483</cve>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1319,15 +1647,19 @@
   <theme name="brilliant">
     <vulnerability>
       <title>brilliant File Upload Vulnerability</title>
-      <reference>http://ruinedsec.wordpress.com/2013/04/03/wordpress-themes-exploits-are-in-action-wpscan/</reference>
+      <references>
+        <url>http://ruinedsec.wordpress.com/2013/04/03/wordpress-themes-exploits-are-in-action-wpscan/</url>
+      </references>
       <type>UPLOAD</type>
     </vulnerability>
   </theme>
-  
+
   <theme name="colormix">
     <vulnerability>
       <title>Multiple vulnerabilities in Colormix theme</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Apr/172</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Apr/172</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </theme>
@@ -1335,15 +1667,19 @@
   <theme name="jobroller">
     <vulnerability>
       <title>XSS in jobroller theme</title>
-      <reference>http://cxsecurity.com/issue/WLB-2013060089</reference>
+      <references>
+        <url>http://cxsecurity.com/issue/WLB-2013060089</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
-  
+
   <theme name="ambience">
     <vulnerability>
       <title>Xss In wordpress ambience theme</title>
-      <reference>http://packetstorm.igor.onlinedirect.bg/1306-exploits/wpambience-xss.txt</reference>
+      <references>
+        <url>http://packetstorm.igor.onlinedirect.bg/1306-exploits/wpambience-xss.txt</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -1351,7 +1687,9 @@
   <theme name="slash-wp">
     <vulnerability>
       <title>FPD, XSS and CS vulnerabilities in Slash WP theme</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Jun/166</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Jun/166</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
   </theme>
@@ -1359,7 +1697,9 @@
   <theme name="persuasion">
     <vulnerability>
       <title>Persuasion Theme: WP-Pretty Photo DOM XSS</title>
-      <reference>http://www.rafayhackingarticles.net/2013/05/kali-linux-dom-based-xss-writeup.html</reference>
+      <references>
+        <url>http://www.rafayhackingarticles.net/2013/05/kali-linux-dom-based-xss-writeup.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
diff --git a/data/vuln.xsd b/data/vuln.xsd
index 8b2404a9..69814126 100644
--- a/data/vuln.xsd
+++ b/data/vuln.xsd
@@ -8,12 +8,22 @@
     </xs:restriction>
   </xs:simpleType>
 
+  <xs:simpleType name="inttype">
+    <xs:restriction base="xs:positiveInteger" />
+  </xs:simpleType>
+
   <xs:simpleType name="uritype">
     <xs:restriction base="xs:anyURI">
       <xs:minLength value="1" />
     </xs:restriction>
   </xs:simpleType>
 
+  <xs:simpleType name="cvetype">
+    <xs:restriction base="xs:token">
+      <xs:pattern value="[0-9]{4}-[0-9]{4,}"/>
+    </xs:restriction>
+  </xs:simpleType>
+
   <xs:simpleType name="typetype">
     <xs:restriction base="stringtype">
       <xs:enumeration value="SQLI"/>
@@ -34,37 +44,50 @@
   </xs:simpleType>
 
   <xs:complexType name="itemtype">
-    <xs:sequence>
-      <xs:element name="vulnerability" type="vulntype" maxOccurs="unbounded" minOccurs="1" />
+    <xs:sequence minOccurs="1" maxOccurs="unbounded">
+      <xs:element name="vulnerability" type="vulntype" />
     </xs:sequence>
     <xs:attribute type="stringtype" name="name" use="required"/>
   </xs:complexType>
 
   <xs:complexType name="wordpresstype">
-    <xs:sequence>
-      <xs:element name="vulnerability" type="vulntype" maxOccurs="unbounded" minOccurs="1" />
+    <xs:sequence minOccurs="1" maxOccurs="unbounded">
+      <xs:element name="vulnerability" type="vulntype"/>
     </xs:sequence>
     <xs:attribute type="stringtype" name="version" use="required"/>
   </xs:complexType>
 
   <xs:complexType name="vulntype">
-    <xs:sequence minOccurs="1" maxOccurs="1">
-      <xs:element name="title" type="stringtype"/>
-      <xs:element name="reference" type="uritype" maxOccurs="unbounded" minOccurs="1"/>
-      <xs:element name="metasploit" type="stringtype" maxOccurs="unbounded" minOccurs="0"/>
-      <xs:element name="cve" type="stringtype" minOccurs="0" maxOccurs="unbounded"/>
-      <xs:element name="type" type="typetype"/>
-      <xs:element name="fixed_in" type="stringtype" minOccurs="0" maxOccurs="1"/>
+    <xs:sequence minOccurs="1" maxOccurs="unbounded">
+      <xs:choice>
+        <xs:element name="title" type="stringtype"/>
+        <xs:element name="type" type="typetype"/>
+        <xs:element name="fixed_in" type="stringtype"/>
+        <xs:element name="references" type="referencetype"/>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="referencetype">
+    <xs:sequence minOccurs="1" maxOccurs="unbounded">
+      <xs:choice>
+        <xs:element name="url" type="uritype" minOccurs="0" maxOccurs="unbounded"/>
+        <xs:element name="cve" type="cvetype" minOccurs="0" maxOccurs="unbounded"/>
+        <xs:element name="secunia" type="inttype" minOccurs="0" maxOccurs="unbounded"/>
+        <xs:element name="osvdb" type="inttype" minOccurs="0" maxOccurs="unbounded"/>
+        <xs:element name="metasploit" type="stringtype" minOccurs="0" maxOccurs="unbounded"/>
+        <xs:element name="exploitdb" type="inttype" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:choice>
     </xs:sequence>
   </xs:complexType>
 
   <xs:element name="vulnerabilities">
     <xs:complexType>
-      <xs:sequence>
+      <xs:choice>
         <xs:element name="plugin" type="itemtype" maxOccurs="unbounded" minOccurs="0"/>
         <xs:element name="theme" type="itemtype" maxOccurs="unbounded" minOccurs="0"/>
         <xs:element name="wordpress" type="wordpresstype" maxOccurs="unbounded" minOccurs="0"/>
-      </xs:sequence>
+      </xs:choice>
     </xs:complexType>
     <xs:unique name="uniquePlugin">
       <xs:selector xpath="plugin"/>
diff --git a/data/wp_vulns.xml b/data/wp_vulns.xml
index 03c91ef7..b05c0139 100644
--- a/data/wp_vulns.xml
+++ b/data/wp_vulns.xml
@@ -6,8 +6,10 @@
   <wordpress version="3.5.2">
     <vulnerability>
       <title>SWFUpload Content Spoofing</title>
-      <reference>http://bot24.blogspot.ca/2013/04/swfupload-object-injectioncsrf.html</reference>
-      <reference>https://github.com/wpscanteam/wpscan/issues/243</reference>
+      <references>
+        <url>http://bot24.blogspot.ca/2013/04/swfupload-object-injectioncsrf.html</url>
+        <url>https://github.com/wpscanteam/wpscan/issues/243</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -15,50 +17,66 @@
   <wordpress version="3.5.1">
     <vulnerability>
       <title>Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure</title>
-      <reference>http://osvdb.org/95060</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/Jul/70</reference>
+      <references>
+        <osvdb>95060</osvdb>
+        <url>http://seclists.org/fulldisclosure/2013/Jul/70</url>
+      </references>
       <type>FPD</type>
       <fixed_in>3.5.2</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.4-3.5.1 DoS in class-phpass.php</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Jun/65</reference>
-      <reference>http://secunia.com/advisories/53676/</reference>
-      <reference>http://osvdb.org/94235</reference>
-      <cve>2013-2173</cve>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Jun/65</url>
+        <secunia>53676</secunia>
+        <osvdb>94235</osvdb>
+        <cve>2013-2173</cve>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Multiple XSS</title>
-      <reference>http://osvdb.org/94791</reference>
-      <reference>http://osvdb.org/94785</reference>
-      <reference>http://osvdb.org/94786</reference>
-      <reference>http://osvdb.org/94790</reference>
+      <references>
+        <osvdb>94791</osvdb>
+        <osvdb>94785</osvdb>
+        <osvdb>94786</osvdb>
+        <osvdb>94790</osvdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress TinyMCE Plugin Flash Applet Unspecified Spoofing Weakness</title>
-      <reference>http://osvdb.org/94787</reference>
+      <references>
+        <osvdb>94787</osvdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress File Upload Unspecified Path Disclosure</title>
-      <reference>http://osvdb.org/94788</reference>
+      <references>
+        <osvdb>94788</osvdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress oEmbed Unspecified XML External Entity (XXE) Arbitrary File Disclosure</title>
-      <reference>http://osvdb.org/94789</reference>
+      <references>
+        <osvdb>94789</osvdb>
+      </references>
       <type>XXE</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress Multiple Role Remote Privilege Escalation</title>
-      <reference>http://osvdb.org/94783</reference>
+      <references>
+        <osvdb>94783</osvdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress HTTP API Unspecified Server Side Request Forgery (SSRF)</title>
-      <reference>http://osvdb.org/94784</reference>
+      <references>
+        <osvdb>94784</osvdb>
+      </references>
       <type>SSRF</type>
     </vulnerability>
   </wordpress>
@@ -66,32 +84,42 @@
   <wordpress version="3.5">
     <vulnerability>
       <title>Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure</title>
-      <reference>http://osvdb.org/95060</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/Jul/70</reference>
+      <references>
+        <osvdb>95060</osvdb>
+        <url>http://seclists.org/fulldisclosure/2013/Jul/70</url>
+      </references>
       <type>FPD</type>
       <fixed_in>3.5.2</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.4-3.5.1 DoS in class-phpass.php</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Jun/65</reference>
-      <reference>http://secunia.com/advisories/53676/</reference>
-      <reference>http://osvdb.org/94235</reference>
-      <cve>2013-2173</cve>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Jun/65</url>
+        <secunia>53676</secunia>
+        <osvdb>94235</osvdb>
+        <cve>2013-2173</cve>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.5 to 3.3.2 Cross-Site Scripting (XSS) (Issue 3)</title>
-      <reference>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</reference>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -99,37 +127,49 @@
   <wordpress version="3.4.2">
     <vulnerability>
       <title>Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure</title>
-      <reference>http://osvdb.org/95060</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/Jul/70</reference>
+      <references>
+        <osvdb>95060</osvdb>
+        <url>http://seclists.org/fulldisclosure/2013/Jul/70</url>
+      </references>
       <type>FPD</type>
       <fixed_in>3.5.2</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.4-3.5.1 DoS in class-phpass.php</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Jun/65</reference>
-      <reference>http://secunia.com/advisories/53676/</reference>
-      <reference>http://osvdb.org/94235</reference>
-      <cve>2013-2173</cve>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Jun/65</url>
+        <secunia>53676</secunia>
+        <osvdb>94235</osvdb>
+        <cve>2013-2173</cve>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.5 to 3.3.2 Cross-Site Scripting (XSS) (Issue 3)</title>
-      <reference>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</reference>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.4.2 Cross Site Request Forgery</title>
-      <reference>http://packetstormsecurity.org/files/116785/WordPress-3.4.2-Cross-Site-Request-Forgery.html</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/116785/WordPress-3.4.2-Cross-Site-Request-Forgery.html</url>
+      </references>
       <type>CSRF</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -137,32 +177,42 @@
   <wordpress version="3.4.1">
     <vulnerability>
       <title>Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure</title>
-      <reference>http://osvdb.org/95060</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/Jul/70</reference>
+      <references>
+        <osvdb>95060</osvdb>
+        <url>http://seclists.org/fulldisclosure/2013/Jul/70</url>
+      </references>
       <type>FPD</type>
       <fixed_in>3.5.2</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.4-3.5.1 DoS in class-phpass.php</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Jun/65</reference>
-      <reference>http://secunia.com/advisories/53676/</reference>
-      <reference>http://osvdb.org/94235</reference>
-      <cve>2013-2173</cve>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Jun/65</url>
+        <secunia>53676</secunia>
+        <osvdb>94235</osvdb>
+        <cve>2013-2173</cve>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.5 to 3.3.2 Cross-Site Scripting (XSS) (Issue 3)</title>
-      <reference>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</reference>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -170,32 +220,42 @@
   <wordpress version="3.4">
     <vulnerability>
       <title>Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure</title>
-      <reference>http://osvdb.org/95060</reference>
-      <reference>http://seclists.org/fulldisclosure/2013/Jul/70</reference>
+      <references>
+        <osvdb>95060</osvdb>
+        <url>http://seclists.org/fulldisclosure/2013/Jul/70</url>
+      </references>
       <type>FPD</type>
       <fixed_in>3.5.2</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.4-3.5.1 DoS in class-phpass.php</title>
-      <reference>http://seclists.org/fulldisclosure/2013/Jun/65</reference>
-      <reference>http://secunia.com/advisories/53676/</reference>
-      <reference>http://osvdb.org/94235</reference>
-      <cve>2013-2173</cve>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2013/Jun/65</url>
+        <secunia>53676</secunia>
+        <osvdb>94235</osvdb>
+        <cve>2013-2173</cve>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.5 to 3.3.2 Cross-Site Scripting (XSS) (Issue 3)</title>
-      <reference>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</reference>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -203,22 +263,30 @@
   <wordpress version="3.4-beta4">
     <vulnerability>
       <title>WordPress 3.5 to 3.3.2 Cross-Site Scripting (XSS) (Issue 3)</title>
-      <reference>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</reference>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 3.3.1 Multiple CSRF Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/18791/</reference>
+      <references>
+        <exploitdb>18791</exploitdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -226,17 +294,23 @@
   <wordpress version="3.3.3">
     <vulnerability>
       <title>WordPress 3.5 to 3.3.2 Cross-Site Scripting (XSS) (Issue 3)</title>
-      <reference>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</reference>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -244,27 +318,37 @@
   <wordpress version="3.3.2">
     <vulnerability>
       <title>WordPress 3.5 to 3.3.2 Cross-Site Scripting (XSS) (Issue 3)</title>
-      <reference>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</reference>
+      <references>
+        <url>https://github.com/wpscanteam/wpscan/wiki/WordPress-3.5-Issues</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 3.3.1 Multiple CSRF Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/18791/</reference>
+      <references>
+        <exploitdb>18791</exploitdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress 3.3.2 Cross Site Scripting</title>
-      <reference>http://packetstormsecurity.org/files/113254</reference>
+      <references>
+        <url>http://packetstormsecurity.org/files/113254</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -272,27 +356,37 @@
   <wordpress version="3.3.1">
     <vulnerability>
       <title>Multiple vulnerabilities including XSS and Privilege Escalation</title>
-      <reference>http://wordpress.org/news/2012/04/wordpress-3-3-2/</reference>
+      <references>
+        <url>http://wordpress.org/news/2012/04/wordpress-3-3-2/</url>
+      </references>
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 3.3.1 Multiple CSRF Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/18791/</reference>
+      <references>
+        <exploitdb>18791</exploitdb>
+      </references>
       <type>CSRF</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -300,22 +394,30 @@
   <wordpress version="3.3">
     <vulnerability>
       <title>Reflected Cross-Site Scripting in WordPress 3.3</title>
-      <reference>http://oldmanlab.blogspot.com/2012/01/wordpress-33-xss-vulnerability.html</reference>
+      <references>
+        <url>http://oldmanlab.blogspot.com/2012/01/wordpress-33-xss-vulnerability.html</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -323,17 +425,23 @@
   <wordpress version="3.2.1">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -341,17 +449,23 @@
   <wordpress version="3.2">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -359,17 +473,23 @@
   <wordpress version="3.1.4">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -377,22 +497,30 @@
   <wordpress version="3.1.3">
     <vulnerability>
       <title>Multiple SQL Injection Vulnerabilities</title>
-      <reference>http://www.exploit-db.com/exploits/17465/</reference>
+      <references>
+        <exploitdb>17465</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -400,22 +528,30 @@
   <wordpress version="3.1.2">
     <vulnerability>
       <title>Wordpress &lt;= 3.1.2 Clickjacking Vulnerability</title>
-      <reference>http://seclists.org/fulldisclosure/2011/Sep/219</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2011/Sep/219</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -423,22 +559,30 @@
   <wordpress version="3.1.1">
     <vulnerability>
       <title>WordPress wp-includes/formatting.php make_clickable() PCRE Library Remote DoS</title>
-      <reference>http://osvdb.org/72142</reference>
+      <references>
+        <osvdb>72142</osvdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -446,17 +590,23 @@
   <wordpress version="3.1">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -464,17 +614,23 @@
   <wordpress version="3.0.6">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -482,17 +638,23 @@
   <wordpress version="3.0.5">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -500,17 +662,23 @@
   <wordpress version="3.0.4">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -518,27 +686,37 @@
   <wordpress version="3.0.3">
     <vulnerability>
       <title>SQL injection vulnerability in do_trackbacks() Wordpress function</title>
-      <reference>http://www.exploit-db.com/exploits/15684/</reference>
+      <references>
+        <exploitdb>15684</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 3.0.3 stored XSS IE7,6 NS8.1</title>
-      <reference>http://www.exploit-db.com/exploits/15858/</reference>
+      <references>
+        <exploitdb>15858</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -546,22 +724,30 @@
   <wordpress version="3.0.2">
     <vulnerability>
       <title>WordPress XML-RPC Interface Access Restriction Bypass</title>
-      <reference>http://osvdb.org/69761</reference>
+      <references>
+        <osvdb>69761</osvdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -569,22 +755,30 @@
   <wordpress version="3.0.1">
     <vulnerability>
       <title>WordPress: Information Disclosure via SQL Injection Attack</title>
-      <reference>http://blog.sjinks.pro/wordpress/858-information-disclosure-via-sql-injection-attack/</reference>
+      <references>
+        <url>http://blog.sjinks.pro/wordpress/858-information-disclosure-via-sql-injection-attack/</url>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -592,17 +786,23 @@
   <wordpress version="3.0">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -610,17 +810,23 @@
   <wordpress version="2.9.2">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -628,17 +834,23 @@
   <wordpress version="2.9.1">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -646,27 +858,37 @@
   <wordpress version="2.9">
     <vulnerability>
       <title>WordPress 2.9 Failure to Restrict URL Access</title>
-      <reference>http://www.exploit-db.com/exploits/11441/</reference>
+      <references>
+        <exploitdb>11441</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress DOS &lt;= 2.9</title>
-      <reference>http://www.exploit-db.com/exploits/11441/</reference>
+      <references>
+        <exploitdb>11441</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -674,17 +896,23 @@
   <wordpress version="2.8.6">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -692,22 +920,30 @@
   <wordpress version="2.8.5">
     <vulnerability>
       <title>WordPress &lt;= 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution</title>
-      <reference>http://www.exploit-db.com/exploits/10089/</reference>
+      <references>
+        <exploitdb>10089</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -715,17 +951,23 @@
   <wordpress version="2.8.4">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -733,22 +975,30 @@
   <wordpress version="2.8.3">
     <vulnerability>
       <title>Wordpress &lt;= 2.8.3 Remote Admin Reset Password Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/9410/</reference>
+      <references>
+        <exploitdb>9410</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -756,17 +1006,23 @@
   <wordpress version="2.8.2">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -774,22 +1030,30 @@
   <wordpress version="2.8.1">
     <vulnerability>
       <title>Wordpress 2.8.1 (url) Remote Cross Site Scripting Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/9250/</reference>
+      <references>
+        <exploitdb>9250</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -797,17 +1061,23 @@
   <wordpress version="2.8">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -815,22 +1085,30 @@
   <wordpress version="2.7.1">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -838,22 +1116,30 @@
   <wordpress version="2.7">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -861,22 +1147,30 @@
   <wordpress version="2.6.5">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -884,17 +1178,23 @@
   <wordpress version="2.6.4">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -902,17 +1202,23 @@
   <wordpress version="2.6.3">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -920,22 +1226,30 @@
   <wordpress version="2.6.2">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -943,27 +1257,37 @@
   <wordpress version="2.6.1">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/6421/</reference>
+      <references>
+        <exploitdb>6421</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -971,17 +1295,23 @@
   <wordpress version="2.6">
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -989,22 +1319,30 @@
   <wordpress version="2.5.1">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1012,23 +1350,31 @@
   <wordpress version="2.5">
     <vulnerability>
       <title>Wordpress 2.5 Cookie Integrity Protection Vulnerability</title>
-      <reference>http://www.securityfocus.com/archive/1/archive/1/491356/100/0/threaded</reference>
-      <cve>2008-1930</cve>
+      <references>
+        <url>http://www.securityfocus.com/archive/1/archive/1/491356/100/0/threaded</url>
+        <cve>2008-1930</cve>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XSS vulnerability in swfupload in WordPress</title>
-      <reference>http://seclists.org/fulldisclosure/2012/Nov/51</reference>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2012/Nov/51</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1036,17 +1382,23 @@
   <wordpress version="2.3.3">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1054,17 +1406,23 @@
   <wordpress version="2.3.2">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1072,22 +1430,30 @@
   <wordpress version="2.3.1">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress &lt;= 2.3.1 Charset Remote SQL Injection Vulnerability</title>
-      <reference>http://www.exploit-db.com/exploits/4721/</reference>
+      <references>
+        <exploitdb>4721</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1095,12 +1461,16 @@
   <wordpress version="2.3">
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1108,17 +1478,23 @@
   <wordpress version="2.2.3">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1126,17 +1502,23 @@
   <wordpress version="2.2.2">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1144,17 +1526,23 @@
   <wordpress version="2.2.1">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1162,27 +1550,37 @@
   <wordpress version="2.2">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress 2.2 (wp-app.php) Arbitrary File Upload Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/4113/</reference>
+      <references>
+        <exploitdb>4113</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 2.2 (xmlrpc.php) Remote SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/4039/</reference>
+      <references>
+        <exploitdb>4039</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1190,22 +1588,30 @@
   <wordpress version="2.1.3">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/3960/</reference>
+      <references>
+        <exploitdb>3960</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1213,28 +1619,38 @@
   <wordpress version="2.1.2">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
-     <vulnerability>
+    <vulnerability>
       <title>WordPress "year" Cross-Site Scripting Vulnerability</title>
-      <reference>http://secunia.com/advisories/24485/</reference>
-      <reference>http://www.securityfocus.com/archive/1/archive/1/462374/100/0/threaded</reference>
+      <references>
+        <secunia>24485</secunia>
+        <url>http://www.securityfocus.com/archive/1/archive/1/462374/100/0/threaded</url>
+      </references>
       <type>XSS</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/3656/</reference>
+      <references>
+        <exploitdb>3656</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1242,17 +1658,23 @@
   <wordpress version="2.1.1">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1260,12 +1682,16 @@
   <wordpress version="2.1">
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1273,17 +1699,23 @@
   <wordpress version="2.0.11">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1291,17 +1723,23 @@
   <wordpress version="2.0.10">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1309,12 +1747,16 @@
   <wordpress version="2.0.9">
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1322,12 +1764,16 @@
   <wordpress version="2.0.8">
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1335,17 +1781,23 @@
   <wordpress version="2.0.7">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1353,22 +1805,30 @@
   <wordpress version="2.0.6">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress &lt;= 2.0.6 wp-trackback.php Remote SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/3109/</reference>
+      <references>
+        <exploitdb>3109</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1376,22 +1836,30 @@
   <wordpress version="2.0.5">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/3095/</reference>
+      <references>
+        <exploitdb>3095</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1399,17 +1867,23 @@
   <wordpress version="2.0.4">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1417,17 +1891,23 @@
   <wordpress version="2.0.3">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1435,22 +1915,30 @@
   <wordpress version="2.0.2">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress &lt;= 2.0.2 (cache) Remote Shell Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/6/</reference>
+      <references>
+        <exploitdb>6</exploitdb>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1458,17 +1946,23 @@
   <wordpress version="2.0.1">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1476,17 +1970,23 @@
   <wordpress version="2.0">
     <vulnerability>
       <title>WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability</title>
-      <reference>http://www.securityfocus.com/bid/35584/</reference>
+      <references>
+        <url>http://www.securityfocus.com/bid/35584/</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1494,12 +1994,16 @@
   <wordpress version="1.5.2">
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1507,17 +2011,23 @@
   <wordpress version="1.5.1.3">
     <vulnerability>
       <title>Wordpress &lt;= 1.5.1.3 Remote Code Execution eXploit (metasploit)</title>
-      <reference>http://www.exploit-db.com/exploits/1145/</reference>
+      <references>
+        <exploitdb>1145</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1525,17 +2035,23 @@
   <wordpress version="1.5.1.2">
     <vulnerability>
       <title>Wordpress &lt;= 1.5.1.2 xmlrpc Interface SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/1077/</reference>
+      <references>
+        <exploitdb>1077</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1543,22 +2059,30 @@
   <wordpress version="1.5.1.1">
     <vulnerability>
       <title>WordPress &lt;= 1.5.1.1 &quot;add new admin&quot; SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/1059/</reference>
+      <references>
+        <secunia>1059</secunia>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress &lt;= 1.5.1.1 SQL Injection Exploit</title>
-      <reference>http://www.exploit-db.com/exploits/1033/</reference>
+      <references>
+        <exploitdb>1033</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
@@ -1566,12 +2090,16 @@
   <wordpress version="1.5.1">
     <vulnerability>
       <title>XMLRPC Pingback API Internal/External Port Scanning</title>
-      <reference>https://github.com/FireFart/WordpressPingbackPortScanner</reference>
+      <references>
+        <url>https://github.com/FireFart/WordpressPingbackPortScanner</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
     <vulnerability>
       <title>WordPress XMLRPC pingback additional issues</title>
-      <reference>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</reference>
+      <references>
+        <url>http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html</url>
+      </references>
       <type>UNKNOWN</type>
     </vulnerability>
   </wordpress>
diff --git a/lib/common/models/vulnerability.rb b/lib/common/models/vulnerability.rb
index 7ca7cf1e..35149ec8 100755
--- a/lib/common/models/vulnerability.rb
+++ b/lib/common/models/vulnerability.rb
@@ -5,24 +5,20 @@ require 'vulnerability/output'
 class Vulnerability
   include Vulnerability::Output
 
-  attr_accessor :title, :references, :type, :fixed_in, :metasploit_modules, :cve
+  attr_accessor :title, :references, :type, :fixed_in
 
   #
   # @param [ String ] title The title of the vulnerability
   # @param [ String ] type  The type of the vulnerability
-  # @param [ Array ] references References urls
-  # @param [ Array ] metasploit_modules Metasploit modules for the vulnerability
+  # @param [ Hash ] references References
   # @param [ String ] fixed_in  Vuln fixed in Version X
-  # @param [ Array ] cve CVE numbers for the vulnerability
   #
   # @return [ Vulnerability ]
-  def initialize(title, type, references, metasploit_modules = [], fixed_in = '', cve = [])
+  def initialize(title, type, references = {}, fixed_in = '')
     @title              = title
     @type               = type
     @references         = references
-    @metasploit_modules = metasploit_modules
     @fixed_in           = fixed_in
-    @cve                = cve
   end
 
   # @param [ Vulnerability ] other
@@ -33,9 +29,7 @@ class Vulnerability
     title == other.title &&
         type == other.type &&
         references == other.references &&
-        fixed_in == other.fixed_in &&
-        cve == other.cve &&
-        metasploit_modules == other.metasploit_modules
+        fixed_in == other.fixed_in
   end
   # :nocov:
 
@@ -45,13 +39,21 @@ class Vulnerability
   #
   # @return [ Vulnerability ]
   def self.load_from_xml_node(xml_node)
+		references = {}
+		refs = xml_node.search('references')
+		if refs
+			references[:url] = refs.search('url').map(&:text)
+			references[:cve] = refs.search('cve').map(&:text)
+			references[:secunia] = refs.search('secunia').map(&:text)
+			references[:osvdb] = refs.search('osvdb').map(&:text)
+			references[:metasploit] = refs.search('metasploit').map(&:text)
+			references[:exploitdb] = refs.search('exploitdb').map(&:text)
+		end
     new(
       xml_node.search('title').text,
       xml_node.search('type').text,
-      xml_node.search('reference').map(&:text),
-      xml_node.search('metasploit').map(&:text),
+      references,
       xml_node.search('fixed_in').text,
-      xml_node.search('cve').map(&:text)
     )
   end
 
diff --git a/lib/common/models/vulnerability/output.rb b/lib/common/models/vulnerability/output.rb
index 00ac2000..aa5e5960 100644
--- a/lib/common/models/vulnerability/output.rb
+++ b/lib/common/models/vulnerability/output.rb
@@ -7,16 +7,28 @@ class Vulnerability
     def output
       puts ' |'
       puts ' | ' + red("* Title: #{title}")
-      references.each do |r|
-        puts ' | ' + red("* Reference: #{r}")
-      end
-      cve.each do |c|
-        puts ' | ' + red("* CVE-#{c} - #{Output.cve_url(c)}")
-      end
-      metasploit_modules.each do |m|
-        puts ' | ' + red("* Metasploit module: #{Output.metasploit_module_url(m)}")
-      end
-    end
+      references.each do |key, urls|
+				urls.each do |u|
+					case(key)
+					when :url
+						url = u
+					when :metasploit
+						url = Output.metasploit_module_url(u)
+					when :secunia
+						url = Output.secunia_url(u)
+					when :osvdb
+						url = Output.osvdb_url(u)
+					when :cve
+						url = Output.cve_url(u)
+					when :exploitdb
+						url = Output.exploitdb_url(u)
+					else
+						url = u
+					end
+					puts ' | ' + red("* Reference: #{url}") if url
+				end
+			end
+		end
 
     # @return [ String ] The url to the metasploit module page
     def self.metasploit_module_url(module_path)
@@ -27,7 +39,19 @@ class Vulnerability
 
     def self.cve_url(cve)
       "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-#{cve}"
-    end
+		end
+
+		def self.osvdb_url(id)
+			"http://osvdb.org/#{id}"
+		end
+
+		def self.secunia_url(id)
+			"http://secunia.com/advisories/#{id}"
+		end
+
+		def self.exploitdb_url(id)
+			"http://www.exploit-db.com/exploits/#{id}/"
+		end
 
   end
 end
diff --git a/spec/lib/common/models/vulnerability_spec.rb b/spec/lib/common/models/vulnerability_spec.rb
index 391a9028..3002c692 100644
--- a/spec/lib/common/models/vulnerability_spec.rb
+++ b/spec/lib/common/models/vulnerability_spec.rb
@@ -5,10 +5,10 @@ require 'spec_helper'
 describe Vulnerability do
 
   describe '#new' do
-    subject(:vulnerability) { Vulnerability.new(title, type, references, modules, fixed_version) }
+    subject(:vulnerability) { Vulnerability.new(title, type, references, fixed_version) }
     let(:title)             { 'A vulnerability title' }
     let(:type)              { 'XSS' }
-    let(:references)        { %w{http://ref1.com http://ref2.com} }
+    let(:references)        { {:url => 'example.com', :metasploit => 'm', :exploitdb => 'e'} }
 
     context 'w/o metasploit and fixed version modules argument' do
       subject(:vulnerability) { Vulnerability.new(title, type, references) }
@@ -16,36 +16,15 @@ describe Vulnerability do
       its(:title)              { should be title }
       its(:references)         { should be references }
       its(:type)               { should be type }
-      its(:metasploit_modules) { should be_empty }
       its(:fixed_in)           { should be_empty }
-      its(:cve)                { should be_empty }
     end
 
-    context 'with metasploit modules argument' do
-      subject(:vulnerability) { Vulnerability.new(title, type, references, modules) }
-      let(:modules) { %w{exploit/some_exploit exploit/unix/anotherone } }
-
-      its(:metasploit_modules) { should be modules }
-      its(:fixed_in)           { should be_empty }
-      its(:cve)                { should be_empty }
-    end
-
-    context 'with metasploit modules and fixed version argument' do
-      let(:modules) { %w{exploit/some_exploit exploit/unix/anotherone } }
+    context 'with fixed version argument' do
       let(:fixed_version)  { '1.0' }
-
-      its(:metasploit_modules) { should be modules }
-      its(:fixed_in)           { should == '1.0' }
-      its(:cve)                { should be_empty }
-    end
-
-    context 'with cve argument' do
-      subject(:vulnerability) { Vulnerability.new(title, type, references, [], '', cve) }
-      let(:cve) { %w{2011-001 2011-002} }
-
-      its(:metasploit_modules) { should be_empty }
-      its(:fixed_in)           { should be_empty }
-      its(:cve)                { should be cve }
+			its(:title)              { should be title }
+			its(:references)         { should be references }
+			its(:type)               { should be type }
+			its(:fixed_in)           { should be fixed_version }
     end
 
   end
@@ -56,11 +35,18 @@ describe Vulnerability do
       xml(MODELS_FIXTURES + '/vulnerability/xml_node.xml').xpath('//vulnerability')
     }
 
+		expected_refs = {
+				:url=>['Ref 1', 'Ref 2'],
+				:cve=>['2011-001'],
+				:secunia=>['secunia'],
+				:osvdb=>['osvdb'],
+				:metasploit=>['exploit/ex1'],
+				:exploitdb=>['exploitdb']
+		}
+
     its(:title)              { should == 'Vuln Title' }
     its(:type)               { should == 'CSRF' }
-    its(:references)         { should == ['Ref 1', 'Ref 2'] }
-    its(:metasploit_modules) { should == %w{exploit/ex1} }
-    its(:cve)                { should == %w{2011-001} }
+    its(:references)         { should ==  expected_refs}
     its(:fixed_in)           { should == '1.0'}
   end
 
diff --git a/spec/lib/common/models/wp_item_spec.rb b/spec/lib/common/models/wp_item_spec.rb
index 84df9c32..bf0a9875 100644
--- a/spec/lib/common/models/wp_item_spec.rb
+++ b/spec/lib/common/models/wp_item_spec.rb
@@ -13,7 +13,15 @@ describe WpItem do
   it_behaves_like 'WpItem::Vulnerable' do
     let(:vulns_file)     { MODELS_FIXTURES + '/wp_item/vulnerable/items_vulns.xml' }
     let(:vulns_xpath)    { "//item[@name='neo']/vulnerability" }
-    let(:expected_vulns) { Vulnerabilities.new << Vulnerability.new("I'm the one", 'XSS', ['http://ref1.com']) }
+		let(:expected_refs)  { {
+				:url => ['Ref 1', 'Ref 2'],
+				:cve => ['2011-001'],
+				:secunia => ['secunia'],
+				:osvdb => ['osvdb'],
+				:metasploit => ['exploit/ex1'],
+				:exploitdb => ['exploitdb']
+		} }
+    let(:expected_vulns) { Vulnerabilities.new << Vulnerability.new("I'm the one", 'XSS', expected_refs) }
   end
 
   subject(:wp_item) { WpItem.new(uri, options) }
diff --git a/spec/lib/common/models/wp_plugin_spec.rb b/spec/lib/common/models/wp_plugin_spec.rb
index f67165d9..8a89879e 100644
--- a/spec/lib/common/models/wp_plugin_spec.rb
+++ b/spec/lib/common/models/wp_plugin_spec.rb
@@ -7,7 +7,15 @@ describe WpPlugin do
   it_behaves_like 'WpItem::Vulnerable' do
     let(:options)        { { name: 'white-rabbit' } }
     let(:vulns_file)     { MODELS_FIXTURES + '/wp_plugin/vulnerable/plugins_vulns.xml' }
-    let(:expected_vulns) { Vulnerabilities.new << Vulnerability.new('Follow me!', 'REDIRECT', ['http://ref2.com']) }
+		let(:expected_refs)  { {
+				:url => ['Ref 1', 'Ref 2'],
+				:cve => ['2011-001'],
+				:secunia => ['secunia'],
+				:osvdb => ['osvdb'],
+				:metasploit => ['exploit/ex1'],
+				:exploitdb => ['exploitdb']
+		} }
+    let(:expected_vulns) { Vulnerabilities.new << Vulnerability.new('Follow me!', 'REDIRECT', expected_refs) }
   end
 
   subject(:wp_plugin) { WpPlugin.new(uri, options) }
diff --git a/spec/lib/common/models/wp_theme_spec.rb b/spec/lib/common/models/wp_theme_spec.rb
index 54b3c03c..19cd1536 100644
--- a/spec/lib/common/models/wp_theme_spec.rb
+++ b/spec/lib/common/models/wp_theme_spec.rb
@@ -8,7 +8,15 @@ describe WpTheme do
   it_behaves_like 'WpItem::Vulnerable' do
     let(:options)        { { name: 'the-oracle' } }
     let(:vulns_file)     { MODELS_FIXTURES + '/wp_theme/vulnerable/themes_vulns.xml' }
-    let(:expected_vulns) { Vulnerabilities.new << Vulnerability.new('I see you', 'FPD', ['http://ref.com']) }
+		let(:expected_refs)  { {
+				:url => ['Ref 1', 'Ref 2'],
+				:cve => ['2011-001'],
+				:secunia => ['secunia'],
+				:osvdb => ['osvdb'],
+				:metasploit => ['exploit/ex1'],
+				:exploitdb => ['exploitdb']
+		} }
+    let(:expected_vulns) { Vulnerabilities.new << Vulnerability.new('I see you', 'FPD', expected_refs) }
   end
 
   subject(:wp_theme)  { WpTheme.new(uri, options) }
diff --git a/spec/lib/common/models/wp_version_spec.rb b/spec/lib/common/models/wp_version_spec.rb
index d3e1518b..6e43a24f 100644
--- a/spec/lib/common/models/wp_version_spec.rb
+++ b/spec/lib/common/models/wp_version_spec.rb
@@ -7,7 +7,15 @@ describe WpVersion do
   it_behaves_like 'WpItem::Vulnerable' do
     let(:options)        { { number: '3.2' } }
     let(:vulns_file)     { MODELS_FIXTURES + '/wp_version/vulnerable/versions_vulns.xml' }
-    let(:expected_vulns) { Vulnerabilities.new << Vulnerability.new('Here I Am', 'SQLI', ['http://ref1.com']) }
+		let(:expected_refs)  { {
+				:url => ['Ref 1', 'Ref 2'],
+				:cve => ['2011-001'],
+				:secunia => ['secunia'],
+				:osvdb => ['osvdb'],
+				:metasploit => ['exploit/ex1'],
+				:exploitdb => ['exploitdb']
+		} }
+    let(:expected_vulns) { Vulnerabilities.new << Vulnerability.new('Here I Am', 'SQLI', expected_refs) }
   end
 
   subject(:wp_version) { WpVersion.new(uri, options) }
diff --git a/spec/samples/common/models/vulnerability/xml_node.xml b/spec/samples/common/models/vulnerability/xml_node.xml
index 24a1fb2e..e409046b 100644
--- a/spec/samples/common/models/vulnerability/xml_node.xml
+++ b/spec/samples/common/models/vulnerability/xml_node.xml
@@ -1,9 +1,14 @@
 <vulnerability>
   <title>Vuln Title</title>
-  <reference>Ref 1</reference>
-  <reference>Ref 2</reference>
-  <cve>2011-001</cve>
+  <references>
+    <metasploit>exploit/ex1</metasploit>
+    <url>Ref 1</url>
+    <url>Ref 2</url>
+    <cve>2011-001</cve>
+    <secunia>secunia</secunia>
+    <osvdb>osvdb</osvdb>
+    <exploitdb>exploitdb</exploitdb>
+  </references>
   <type>CSRF</type>
-  <metasploit>exploit/ex1</metasploit>
   <fixed_in>1.0</fixed_in>
 </vulnerability>
diff --git a/spec/samples/common/models/wp_item/vulnerable/items_vulns.xml b/spec/samples/common/models/wp_item/vulnerable/items_vulns.xml
index 514a4a3a..33c853b5 100644
--- a/spec/samples/common/models/wp_item/vulnerable/items_vulns.xml
+++ b/spec/samples/common/models/wp_item/vulnerable/items_vulns.xml
@@ -5,7 +5,15 @@
   <item name="not-this-one">
     <vulnerability>
       <title>I should not appear in the results</title>
-      <reference>http://ref1.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>RFI</type>
     </vulnerability>
   </item>
@@ -13,7 +21,15 @@
   <item name="neo">
     <vulnerability>
       <title>I'm the one</title>
-      <reference>http://ref1.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </item>
diff --git a/spec/samples/common/models/wp_plugin/vulnerable/plugins_vulns.xml b/spec/samples/common/models/wp_plugin/vulnerable/plugins_vulns.xml
index 45ffea40..f710c3a6 100644
--- a/spec/samples/common/models/wp_plugin/vulnerable/plugins_vulns.xml
+++ b/spec/samples/common/models/wp_plugin/vulnerable/plugins_vulns.xml
@@ -4,12 +4,28 @@
   <plugin name="mr-smith">
     <vulnerability>
       <title>I should not appear in the results</title>
-      <reference>http://ref1.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>RCE</type>
     </vulnerability>
     <vulnerability>
       <title>Neither do I</title>
-      <reference>http://ref3.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </plugin>
@@ -17,7 +33,15 @@
   <plugin name="white-rabbit">
     <vulnerability>
       <title>Follow me!</title>
-      <reference>http://ref2.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>REDIRECT</type>
     </vulnerability>
   </plugin>
diff --git a/spec/samples/common/models/wp_theme/vulnerable/themes_vulns.xml b/spec/samples/common/models/wp_theme/vulnerable/themes_vulns.xml
index 5d4121b2..da0e09f4 100644
--- a/spec/samples/common/models/wp_theme/vulnerable/themes_vulns.xml
+++ b/spec/samples/common/models/wp_theme/vulnerable/themes_vulns.xml
@@ -4,12 +4,28 @@
   <theme name="not-this-one">
     <vulnerability>
       <title>I should not appear in the results</title>
-      <reference>http://some-ref.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
       <title>Neither do I</title>
-      <reference>http://some-other-ref.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
@@ -17,7 +33,15 @@
   <theme name="the-oracle">
     <vulnerability>
       <title>I see you</title>
-      <reference>http://ref.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>FPD</type>
     </vulnerability>
   </theme>
diff --git a/spec/samples/common/models/wp_version/vulnerable/versions_vulns.xml b/spec/samples/common/models/wp_version/vulnerable/versions_vulns.xml
index 78b37b65..2f4c4237 100644
--- a/spec/samples/common/models/wp_version/vulnerable/versions_vulns.xml
+++ b/spec/samples/common/models/wp_version/vulnerable/versions_vulns.xml
@@ -4,7 +4,15 @@
   <wordpress version="3.5">
     <vulnerability>
       <title>I should not appear in the results</title>
-      <reference>http://ref2.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>XSS</type>
     </vulnerability>
   </wordpress>
@@ -12,7 +20,15 @@
   <wordpress version="3.2">
     <vulnerability>
       <title>Here I Am</title>
-      <reference>http://ref1.com</reference>
+      <references>
+        <metasploit>exploit/ex1</metasploit>
+        <url>Ref 1</url>
+        <url>Ref 2</url>
+        <cve>2011-001</cve>
+        <secunia>secunia</secunia>
+        <osvdb>osvdb</osvdb>
+        <exploitdb>exploitdb</exploitdb>
+      </references>
       <type>SQLI</type>
     </vulnerability>
   </wordpress>
diff --git a/spec/shared_examples/wp_item_vulnerable.rb b/spec/shared_examples/wp_item_vulnerable.rb
index b08708b4..00c37fd5 100644
--- a/spec/shared_examples/wp_item_vulnerable.rb
+++ b/spec/shared_examples/wp_item_vulnerable.rb
@@ -60,10 +60,10 @@ shared_examples 'WpItem::Vulnerable' do
     let(:version_orig) { '1.5.6' }
     let(:version_newer) { '1.6' }
     let(:version_older) { '1.0' }
-    let(:newer) { Vulnerability.new('Newer', 'XSS', ['ref'], nil, version_newer) }
-    let(:older) { Vulnerability.new('Older', 'XSS', ['ref'], nil, version_older) }
-    let(:same) { Vulnerability.new('Same', 'XSS', ['ref'], nil, version_orig) }
-    let(:no_fixed_info) { Vulnerability.new('Same', 'XSS', ['ref'], nil, nil) }
+    let(:newer) { Vulnerability.new('Newer', 'XSS', { :url => ['http://ref.com'] }, version_newer) }
+    let(:older) { Vulnerability.new('Older', 'XSS', { :url => ['http://ref.com'] }, version_older) }
+    let(:same) { Vulnerability.new('Same', 'XSS', { :url => ['http://ref.com'] }, version_orig) }
+    let(:no_fixed_info) { Vulnerability.new('Same', 'XSS', { :url => ['http://ref.com'] }, nil) }
 
     before do
       stub_request(:get, /.*\/readme\.txt/i).to_return(status: 200, body: "Stable Tag: #{version_orig}")