From b8bdd7467be92569f4c51638fa1782565a319a81 Mon Sep 17 00:00:00 2001
From: Christian Mehlmauer <firefart@gmail.com>
Date: Thu, 7 Feb 2013 23:35:08 +0100
Subject: [PATCH] added vulns

---
 data/plugin_vulns.xml | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index 4d5d2f54..0f42d0a6 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -3320,6 +3320,9 @@
     <vulnerability>
       <title>SQL Injection Vulnerability in Wysija Newsletters WordPress Plugin &lt; 2.2.1</title>
       <reference>https://www.htbridge.com/advisory/HTB23140</reference>
+      <reference>http://packetstormsecurity.com/files/120089/wpwysijanl-sql.txt</reference>
+      <reference>http://seclists.org/bugtraq/2013/Feb/29</reference>
+      <reference>http://cxsecurity.com/issue/WLB-2013020039</reference>
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
@@ -3632,6 +3635,7 @@
       <title>Wordpress wp-table-reloaded plugin &lt; 1.9.4 cross-site scripting in SWF</title>
       <reference>http://packetstormsecurity.com/files/119968/wptablereloaded-xss.txt</reference>
       <reference>http://secunia.com/advisories/52027/</reference>
+      <reference>http://seclists.org/bugtraq/2013/Feb/28</reference>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3662,8 +3666,11 @@
   
   <plugin name="commentluv">
     <vulnerability>
-      <title>Cross-Site Scripting (XSS) Vulnerability in CommentLuv WordPress Plugin</title>
+      <title>Cross-Site Scripting (XSS) Vulnerability in CommentLuv WordPress Plugin &lt; 2.92.4</title>
       <reference>https://www.htbridge.com/advisory/HTB23138</reference>
+      <reference>http://packetstormsecurity.com/files/120090/wpcommentluv-xss.txt</reference>
+      <reference>http://seclists.org/bugtraq/2013/Feb/30</reference>
+      <reference>http://cxsecurity.com/issue/WLB-2013020040</reference>
       <type>XSS</type>
     </vulnerability>
   </plugin>
@@ -3676,4 +3683,20 @@
     </vulnerability>
   </plugin>
   
+  <plugin name="wp-ecommerce-shop-styling">
+    <vulnerability>
+      <title>WordPress WP ecommerce Shop Styling Plugin &lt; 1.8 "dompdf" Remote File Inclusion Vulnerability</title>
+      <reference>http://secunia.com/advisories/51707/</reference>
+      <type>RFI</type>
+    </vulnerability>
+  </plugin>
+  
+  <plugin name="audio-player">
+    <vulnerability>
+      <title>Wordpress Audio Player Plugin &lt; 2.0.4.6 XSS in SWF</title>
+      <reference>http://seclists.org/bugtraq/2013/Feb/35</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  
 </vulnerabilities>