diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index e26d6190..ff6017aa 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -33,6 +33,14 @@ ryandewhurst at gmail
 
 <vulnerabilities>
 
+  <plugin name="catalog">
+    <vulnerability>
+      <title>Catalog HTML Code Injection and Cross-site scripting</title>
+      <reference>http://packetstormsecurity.org/files/117820/wpcatalog-xss.txt</reference>
+      <type>MULTI</type>
+    <vulnerability>
+  </plugin>
+
   <plugin name="wordfence">
     <vulnerability>
       <title>Wordfence 3.3.5 XSS and IAA</title>