diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index ad33169d..c3178e41 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -8792,6 +8792,7 @@
       <title>Contact Form 7 3.5.2 - File Upload Remote Code Execution</title>
       <references>
         <osvdb>100189</osvdb>
+        <url>http://packetstormsecurity.com/files/124154/</url>
       </references>
       <type>RCE</type>
       <fixed_in>3.5.3</fixed_in>
@@ -8802,6 +8803,7 @@
     <vulnerability>
       <title>Store Locator &lt;= 2.6.1 - Cross-Site Request Forgery Vulnerability</title>
       <references>
+        <osvdb>100485</osvdb>
         <secunia>55276</secunia>
       </references>
       <type>CSRF</type>
@@ -8832,4 +8834,14 @@
     </vulnerability>
   </plugin>
 
+  <plugin name="js-multihotel">
+    <vulnerability>
+      <title>Js-Multi-Hotel 2.2.1 - Cross Site Scripting</title>
+      <references>
+        <url>http://packetstormsecurity.com/files/124239/</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+
 </vulnerabilities>