From dda043d7f7d896c465a48abab599fe809a24e2d0 Mon Sep 17 00:00:00 2001
From: Gianluca Brindisi <g@brindi.si>
Date: Thu, 22 Nov 2012 11:31:14 +0100
Subject: [PATCH] Added
 http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html

---
 data/plugin_vulns.xml | 549 +++++++++++++++++++++---------------------
 1 file changed, 269 insertions(+), 280 deletions(-)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index 085ac0dd..189a745d 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -1,4 +1,3 @@
-<?xml version="1.0"?>
 <!--
 WPScan - WordPress Security Scanner
 Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
@@ -30,9 +29,245 @@ ryandewhurst at gmail
   </plugin>
 
 -->
-
 <vulnerabilities>
-
+  <plugin name="apptha-banner">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="apptha-slider-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="blaze-slide-show-for-wordpress">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="comment-extra-field">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="fluid-accessible-rich-inline-edit">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="fluid-accessible-pager">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="fluid-accessible-uploader">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="fluid-accessible-ui-options">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="fresh-page">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="mac-dock-photogallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="pdw-file-browser">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="power-zoomer">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="slide-show-pro">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="smart-slide-show">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="spotlightyour">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="sprapid">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="ultimate-tinymce">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-3dbanner-rotator">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-3dflick-slideshow">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-bliss-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-carouselslideshow">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-dreamworkgallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-ecommerce-cvs-importer">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-extended">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-flipslideshow">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-homepage-slideshow">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-image-news-slider">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-levoslideshow">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-matrix-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-powerplaygallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-royal-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-superb-slideshow">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-vertical-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
+  <plugin name="wp-yasslideshow">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </plugin>
   <plugin name="cardoza-ajax-search">
     <vulnerability>
       <title>Ajax Post Search 1.1 Sql Injection</title>
@@ -40,7 +275,6 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="answer-my-question">
     <vulnerability>
       <title>Answer My Question 1.1 Multiple XSS</title>
@@ -48,7 +282,6 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="catalog">
     <vulnerability>
       <title>Catalog HTML Code Injection and Cross-site scripting</title>
@@ -56,7 +289,6 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wordfence">
     <vulnerability>
       <title>Wordfence 3.3.5 XSS and IAA</title>
@@ -64,31 +296,27 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="slideshow-jquery-image-gallery">
     <vulnerability>
-        <title>Slideshow jQuery Image Gallery  Multiple Vulnerabilities</title>
-        <reference>http://www.waraxe.us/advisory-92.html</reference>
+      <title>Slideshow jQuery Image Gallery  Multiple Vulnerabilities</title>
+      <reference>http://www.waraxe.us/advisory-92.html</reference>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="social-discussions">
     <vulnerability>
-        <title>Social Discussions Multiple Vulnerabilities</title>
-        <reference>http://www.waraxe.us/advisory-93.html</reference>
+      <title>Social Discussions Multiple Vulnerabilities</title>
+      <reference>http://www.waraxe.us/advisory-93.html</reference>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="abtest">
     <vulnerability>
-        <title>ABtest Directory Traversal </title>
+      <title>ABtest Directory Traversal </title>
       <reference>http://scott-herbert.com/blog/2012/10/11/wordpress-plugin-abtest-vulnerable-to-a-directory-traversal-attack-1110</reference>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="bbpress">
     <vulnerability>
       <title>BBPress SQL Injection / Path Disclosure</title>
@@ -96,7 +324,6 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="nextgen_cu3er_gallery">
     <vulnerability>
       <title>NextGen Cu3er Gallery Information Disclosure</title>
@@ -104,7 +331,6 @@ ryandewhurst at gmail
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="rich-widget">
     <vulnerability>
       <title>Rich Widget File Upload</title>
@@ -112,7 +338,6 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="monsters-editor-10-for-wp-super-edit">
     <vulnerability>
       <title>Monsters Editor Shell Upload</title>
@@ -120,7 +345,6 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="quick-post-widget">
     <vulnerability>
       <title>Quick Post Widget 1.9.1 Multiple Cross-site scripting vulnerabilities</title>
@@ -128,7 +352,6 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="threewp-email-reflector">
     <vulnerability>
       <title>ThreeWP Email Reflector 1.13 Stored XSS</title>
@@ -136,7 +359,6 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-simplemail">
     <vulnerability>
       <title>SimpleMail 1.0.6 Stored XSS</title>
@@ -144,7 +366,6 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="postie">
     <vulnerability>
       <title>Postie 1.4.3 Stored XSS</title>
@@ -152,7 +373,6 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="rsvpmaker">
     <vulnerability>
       <title>RSVPMaker v2.5.4 Persistent XSS</title>
@@ -160,7 +380,6 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="mz-jajak">
     <vulnerability>
       <title>Mz-jajak &lt;= 2.1 SQL Injection Vulnerability</title>
@@ -168,7 +387,6 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="resume-submissions-job-postings">
     <vulnerability>
       <title>Resume Submissions Job Posting v2.5.1 Unrestricted File Upload</title>
@@ -176,7 +394,6 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-predict">
     <vulnerability>
       <title>WP-Predict v1.0 Blind SQL Injection</title>
@@ -184,7 +401,6 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="backup">
     <vulnerability>
       <title>Backup Plugin 2.0.1 Information Disclosure</title>
@@ -192,7 +408,6 @@ ryandewhurst at gmail
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="moodthingy-mood-rating-widget">
     <vulnerability>
       <title>MoodThingy Widget v0.8.7 Blind SQL Injection</title>
@@ -200,7 +415,6 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="paid-business-listings">
     <vulnerability>
       <title>Paid Business Listings v1.0.2 Blind SQL Injection</title>
@@ -208,7 +422,6 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="website-faq">
     <vulnerability>
       <title>Website FAQ Plugin v1.0 SQL Injection</title>
@@ -216,7 +429,6 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="radykal-fancy-gallery">
     <vulnerability>
       <title>Fancy Gallery 1.2.4 Shell Upload</title>
@@ -224,7 +436,6 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="flipbook">
     <vulnerability>
       <title>Flip Book 1.0 Shell Upload</title>
@@ -232,7 +443,6 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="ajax_multi_upload">
     <vulnerability>
       <title>Ajax Multi Upload 1.1 Shell Upload</title>
@@ -240,7 +450,6 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="schreikasten">
     <vulnerability>
       <title>Schreikasten 0.14.13 XSS</title>
@@ -248,7 +457,6 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-automatic">
     <vulnerability>
       <title>Wordpress Automatic 2.0.3 CSRF</title>
@@ -256,7 +464,6 @@ ryandewhurst at gmail
       <type>CSRF</type>
     </vulnerability>
   </plugin>
-
   <plugin name="videowhisper-video-conference-integration">
     <vulnerability>
       <title>VideoWhisper Video Conference
@@ -265,7 +472,6 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="auctionplugin">
     <vulnerability>
       <title>Auctions Plugin 2.0.1.3 Arbitrary
@@ -274,7 +480,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="lb-mixed-slideshow">
     <vulnerability>
       <title>LB Mixed Slideshow 1.0 Arbitrary File Upload Vulnerability</title>
@@ -282,7 +487,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="lim4wp">
     <vulnerability>
       <title>Lim4wp 1.1.1 Arbitrary File Upload Vulnerability</title>
@@ -290,7 +494,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-imagezoom">
     <vulnerability>
       <title>Wp-ImageZoom 1.0.3 Remote File Disclosure</title>
@@ -298,7 +501,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="invit0r">
     <vulnerability>
       <title>Invit0r 0.22 Shell Upload</title>
@@ -306,7 +508,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="announces">
     <vulnerability>
       <title>Annonces 1.2.0.1 Shell Upload</title>
@@ -314,7 +515,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="contus-video-galleryversion-10">
     <vulnerability>
       <title>Contus Video Gallery 1.3 Arbitrary
@@ -323,7 +523,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="contus-hd-flv-player">
     <vulnerability>
       <title>Contus HD FLV Player 1.7 Arbitrary
@@ -332,7 +531,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="user-meta">
     <vulnerability>
       <title>User Meta Version 1.1.1 Arbitrary File Upload Vulnerability</title>
@@ -340,7 +538,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="topquark">
     <vulnerability>
       <title>Top Quark Architecture Version 2.10 Arbitrary File Upload Vulnerability</title>
@@ -348,7 +545,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="sfbrowser">
     <vulnerability>
       <title>SfBrowser Version 1.4.5 Arbitrary File Upload Vulnerability</title>
@@ -356,23 +552,30 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="pica-photo-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
     <vulnerability>
       <title>Pica Photo Gallery 1.0 Arbitrary File Upload Vulnerability</title>
       <reference>http://www.exploit-db.com/exploits/19055/</reference>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="mac-dock-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
     <vulnerability>
       <title>Mac Photo Gallery 2.7 Arbitrary File Upload</title>
       <reference>http://www.exploit-db.com/exploits/19056/</reference>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="drag-drop-file-uploader">
     <vulnerability>
       <title>drag and drop file upload 0.1 Arbitrary File Upload Vulnerability</title>
@@ -380,7 +583,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="custom-content-type-manager">
     <vulnerability>
       <title>Custom Content Type Manager 0.9.5.13-pl Arbitrary File Upload Vulnerability</title>
@@ -388,7 +590,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-gpx-map">
     <vulnerability>
       <title>wp-gpx-max version 1.1.21 Arbitrary File Upload</title>
@@ -396,7 +597,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="front-file-manager">
     <vulnerability>
       <title>Front File Manager Plugin 0.1 Arbitrary File Upload</title>
@@ -404,7 +604,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="front-end-upload">
     <vulnerability>
       <title>Front End Upload 0.5.3 Arbitrary File Upload</title>
@@ -417,7 +616,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="omni-secure-files">
     <vulnerability>
       <title>Omni Secure Files 0.1.13 Arbitrary File Upload</title>
@@ -425,7 +623,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="easy-contact-forms-exporter">
     <vulnerability>
       <title>Easy Contact Forms Export 1.1.0 Information Disclosure Vulnerability</title>
@@ -433,7 +630,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="pica-photo-gallery">
     <vulnerability>
       <title>PICA Photo Gallery 1.0 Remote File Disclosure</title>
@@ -441,7 +637,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="plugin-newsletter">
     <vulnerability>
       <title>Plugin: Newsletter 1.5 Remote File Disclosure Vulnerability</title>
@@ -449,7 +644,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="rbxgallery">
     <vulnerability>
       <title>RBX Gallery 2.1 Arbitrary File Upload</title>
@@ -457,7 +651,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="simple-download-button-shortcode">
     <vulnerability>
       <title>Simple Download Button Shortcode 1.0 Remote File Disclosure</title>
@@ -465,7 +658,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="thinkun-remind">
     <vulnerability>
       <title>Thinkun Remind 1.1.3 Remote File Disclosure</title>
@@ -473,7 +665,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="tinymce-thumbnail-gallery">
     <vulnerability>
       <title>Tinymce Thumbnail Gallery 1.0.7 Remote File Disclosure</title>
@@ -481,7 +672,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wpstorecart">
     <vulnerability>
       <title>wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload</title>
@@ -489,7 +679,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="gallery-plugin">
     <vulnerability>
       <title>Gallery 3.06 Arbitrary File Upload</title>
@@ -497,7 +686,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="font-uploader">
     <vulnerability>
       <title>Font Uploader 1.2.4 Arbitrary File Upload</title>
@@ -505,7 +693,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-property">
     <vulnerability>
       <title>WP-Property 1.35.0 Arbitrary File Upload</title>
@@ -513,7 +700,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wpmarketplace">
     <vulnerability>
       <title>WP Marketplace 1.5.0 - 1.6.1 Arbitrary File Upload</title>
@@ -521,7 +707,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="store-locator-le">
     <vulnerability>
       <title>Google Maps via Store Locator Multiple Vulnerabilities</title>
@@ -529,7 +714,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="html5avmanager">
     <vulnerability>
       <title>HTML5 AV Manager 0.2.7 Arbitrary File Upload</title>
@@ -537,7 +721,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="foxypress">
     <vulnerability>
       <title>Foxypress 0.4.1.1 - 0.4.2.1 Arbitrary File Upload</title>
@@ -550,7 +733,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="asset-manager">
     <vulnerability>
       <title>Asset Manager 0.2 Arbitrary File Upload</title>
@@ -558,7 +740,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="track-that-stat">
     <vulnerability>
       <title>Track That Stat &lt;= 1.0.8 Cross Site Scripting</title>
@@ -566,7 +747,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-facethumb">
     <vulnerability>
       <title>WP-Facethumb Gallery &lt;= 0.1 Reflected Cross Site Scripting</title>
@@ -574,7 +754,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-survey-and-quiz-tool">
     <vulnerability>
       <title>Survey And Quiz Tool &lt;= 2.9.2 Cross Site Scripting</title>
@@ -582,7 +761,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-statistics">
     <vulnerability>
       <title>WP Statistics &lt;= 2.2.4 Cross Site Scripting</title>
@@ -590,7 +768,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-easy-gallery">
     <vulnerability>
       <title>WP Easy Gallery &lt;= 1.7 Cross Site Scripting</title>
@@ -598,7 +775,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="subscribe2">
     <vulnerability>
       <title>Subscribe2 &lt;= 8.0 Cross Site Scripting</title>
@@ -606,7 +782,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="soundcloud-is-gold">
     <vulnerability>
       <title>Soundcloud Is Gold &lt;= 2.1 Cross Site Scripting</title>
@@ -614,7 +789,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="sharebar">
     <vulnerability>
       <title>Sharebar &lt;= 1.2.1 SQL Injection / Cross Site Scripting</title>
@@ -622,7 +796,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="share-and-follow">
     <vulnerability>
       <title>Share And Follow &lt;= 1.80.3 Cross Site Scripting</title>
@@ -630,7 +803,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="sabre">
     <vulnerability>
       <title>SABRE &lt;= 1.2.0 Cross Site Scripting</title>
@@ -638,7 +810,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="pretty-link">
     <vulnerability>
       <title>Pretty Link Lite &lt;= 1.5.2 Cross Site Scripting</title>
@@ -646,7 +817,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="newsletter-manager">
     <vulnerability>
       <title>Newsletter Manager &lt;= 1.0 Cross Site Scripting</title>
@@ -654,7 +824,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="network-publisher">
     <vulnerability>
       <title>Network Publisher &lt;= 5.0.1 Cross Site Scripting</title>
@@ -662,7 +831,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="leaguemanager">
     <vulnerability>
       <title>LeagueManager &lt;= 3.7 Cross Site Scripting</title>
@@ -670,7 +838,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="leaflet">
     <vulnerability>
       <title>Leaflet &lt;= 0.0.1 Cross Site Scripting</title>
@@ -678,7 +845,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="joliprint">
     <vulnerability>
       <title>PDF And Print Button Joliprint &lt;= 1.3.0 Cross Site Scripting</title>
@@ -686,7 +852,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="iframe-admin-pages">
     <vulnerability>
       <title>IFrame Admin Pages &lt;= 0.1 Cross Site Scripting</title>
@@ -694,7 +859,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="ezpz-one-click-backup">
     <vulnerability>
       <title>EZPZ One Click Backup &lt;= 12.03.10 Cross Site Scripting</title>
@@ -702,7 +866,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="dynamic-widgets">
     <vulnerability>
       <title>Dynamic Widgets &lt;= 1.5.1 Cross Site Scripting</title>
@@ -710,7 +873,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="download-monitor">
     <vulnerability>
       <title>Download Monitor &lt;= 3.3.5.7 Cross Site Scripting</title>
@@ -723,7 +885,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="download-manager">
     <vulnerability>
       <title>Download Manager &lt;= 2.2 Cross Site Scripting</title>
@@ -731,7 +892,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="codestyling-localization">
     <vulnerability>
       <title>Code Styling Localization &lt;= 1.99.16 Cross Site Scripting</title>
@@ -739,7 +899,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="catablog">
     <vulnerability>
       <title>Catablog &lt;= 1.6 Cross Site Scripting</title>
@@ -747,7 +906,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="bad-behavior">
     <vulnerability>
       <title>Bad Behavior &lt;= 2.24 Cross Site Scripting</title>
@@ -755,7 +913,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="bulletproof-security">
     <vulnerability>
       <title>BulletProof Security &lt;= 0.47 Cross Site Scripting</title>
@@ -763,7 +920,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="better-wp-security">
     <vulnerability>
       <title>Better WP Security v3.4.3</title>
@@ -776,7 +932,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="custom-contact-forms">
     <vulnerability>
       <title>Custom Contact Forms &lt;= 5.0.0.1 Cross Site Scripting</title>
@@ -784,7 +939,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="2-click-socialmedia-button">
     <vulnerability>
       <title>2-Click-Socialmedia-Buttons &lt;= 0.34 Cross Site Scripting</title>
@@ -797,7 +951,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="login-with-ajax">
     <vulnerability>
       <title>Login With Ajax plugin &lt; 3.0.4.1 Cross Site Scripting</title>
@@ -805,7 +958,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="media-library-categories">
     <vulnerability>
       <title>Media Library Categories plugin &lt;= 1.0.6 SQL Injection Vulnerability</title>
@@ -818,7 +970,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="deans-fckeditor-with-pwwangs-code-plugin-for-wordpress">
     <vulnerability>
       <title>FCKeditor Deans With Pwwangs Code &lt;= 1.0.0 Remote Shell Upload</title>
@@ -826,7 +977,6 @@ File Upload Vulnerability</title>
       <type>RFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="zingiri-web-shop">
     <vulnerability>
       <title>Zingiri Web Shop &lt;= 2.4.0 Multiple XSS Vulnerabilities</title>
@@ -844,7 +994,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="organizer">
     <vulnerability>
       <title>Organizer 1.2.1 Cross Site Scripting / Path Disclosure</title>
@@ -852,7 +1001,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="zingiri-tickets">
     <vulnerability>
       <title>Zingiri Tickets plugin File Disclosure</title>
@@ -860,7 +1008,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="cms-tree-page-view">
     <vulnerability>
       <title>XSS vulnerability in CMS Tree Page View Plugin</title>
@@ -868,7 +1015,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="all-in-one-event-calendar">
     <vulnerability>
       <title>Multiple XSS vulnerabilities in All-in-One Event Calendar for WordPress</title>
@@ -876,7 +1022,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="buddypress">
     <vulnerability>
       <title>Buddypress &lt;= 1.5.5 SQL Injection</title>
@@ -884,7 +1029,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="register-plus-redux">
     <vulnerability>
       <title>Register Plus Redux  &lt;= 3.8.3 Cross Site Scripting</title>
@@ -892,7 +1036,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="magn-html5-drag-and-drop-media-uploader">
     <vulnerability>
       <title>Magn WP Drag and Drop &lt;= 1.1.4 Upload Shell Upload Vulnerability</title>
@@ -900,7 +1043,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="kish-guest-posting">
     <vulnerability>
       <title>Kish Guest Posting 1.0 Arbitrary File Upload</title>
@@ -908,7 +1050,6 @@ File Upload Vulnerability</title>
       <type>RFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="allwebmenus-wordpress-menu-plugin">
     <vulnerability>
       <title>AllWebMenus Shell Upload &lt;= 1.1.9 Shell Upload</title>
@@ -923,7 +1064,6 @@ File Upload Vulnerability</title>
       <postdata>abspath=XXpathXX</postdata>
     </vulnerability>
   </plugin>
-
   <plugin name="shortcode-redirect">
     <vulnerability>
       <title>Shortcode Redirect &lt;= 1.0.01 Stored Cross Site Scripting</title>
@@ -931,7 +1071,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="ucan-post">
     <vulnerability>
       <title>uCan Post plugin &lt;= 1.0.09 Stored XSS</title>
@@ -939,7 +1078,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-cycle-playlist">
     <vulnerability>
       <title>WP Cycle Playlist plugin Multiple Vulnerabilities</title>
@@ -947,7 +1085,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="myeasybackup">
     <vulnerability>
       <title>myEASYbackup 1.0.8.1 Directory Traversal</title>
@@ -955,7 +1092,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="count-per-day">
     <vulnerability>
       <title>Count Per Day 3.2.3 Cross Site Scripting</title>
@@ -978,7 +1114,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-autoyoutube">
     <vulnerability>
       <title>WP-AutoYoutube plugin &lt;= 0.1 Blind SQL Injection Vulnerability</title>
@@ -986,7 +1121,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="age-verification">
     <vulnerability>
       <title>Age Verification plugin &lt;= 0.4 Open Redirect</title>
@@ -994,7 +1128,6 @@ File Upload Vulnerability</title>
       <type>REDIRECT</type>
     </vulnerability>
   </plugin>
-
   <plugin name="yousaytoo-auto-publishing-plugin">
     <vulnerability>
       <title>Yousaytoo Auto Publishing &lt;= 1.0 Cross Site Scripting</title>
@@ -1002,7 +1135,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="pay-with-tweet">
     <vulnerability>
       <title>Pay With Tweet plugin &lt;= 1.1 Multiple Vulnerabilities</title>
@@ -1010,7 +1142,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-whois">
     <vulnerability>
       <title>Whois Search &lt;= 1.4.2 Cross Site Scripting</title>
@@ -1018,7 +1149,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="upm-polls">
     <vulnerability>
       <title>BLIND SQL injection UPM-POLLS plugin 1.0.4</title>
@@ -1026,7 +1156,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="disqus-comment-system">
     <vulnerability>
       <title>Disqus Comment System &lt;= 2.68 Reflected Cross-Site Scripting (XSS)</title>
@@ -1034,7 +1163,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-recaptcha">
     <vulnerability>
       <title>Google reCAPTCHA &lt;= 3.1.3 Reflected XSS Vulnerability </title>
@@ -1042,7 +1170,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="link-library">
     <vulnerability>
       <title>Link Library plugin &lt;= 5.2.1 SQL Injection</title>
@@ -1050,7 +1177,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="cevhershare">
     <vulnerability>
       <title>CevherShare 2.0 plugin SQL Injection Vulnerability</title>
@@ -1058,7 +1184,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-glossary">
     <vulnerability>
       <title>WP Glossary plugin SQL Injection Vulnerability</title>
@@ -1066,7 +1191,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="meenews">
     <vulnerability>
       <title>meenews 5.1 plugin Cross-Site Scripting Vulnerabilities</title>
@@ -1074,7 +1198,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="clickdesk-live-support-chat">
     <vulnerability>
       <title>Click Desk Live Support Chat &lt; 2.0 Cross Site Scripting Vulnerability</title>
@@ -1082,7 +1205,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="adminimize">
     <vulnerability>
       <title>adminimize 1.7.21 Cross-Site Scripting Vulnerabilities</title>
@@ -1090,7 +1212,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="advanced-text-widget">
     <vulnerability>
       <title>Advanced Text Widget &lt;= 2.0.0 Cross Site Scripting Vulnerability</title>
@@ -1098,7 +1219,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="mm-duplicate">
     <vulnerability>
       <title>MM Duplicate plugin &lt;= 1.2 SQL Injection Vulnerability</title>
@@ -1106,7 +1226,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="ungallery">
     <vulnerability>
       <title>UnGallery plugin &lt;= 1.5.8 Local File Disclosure Vulnerability</title>
@@ -1114,7 +1233,6 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-menu-creator">
     <vulnerability>
       <title>Menu Creator plugin &lt;= 1.1.7 SQL Injection Vulnerability</title>
@@ -1122,7 +1240,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="allow-php-in-posts-and-pages">
     <vulnerability>
       <title>Allow PHP in Posts and Pages plugin &lt;= 2.0.0.RC1 SQL Injection Vulnerability</title>
@@ -1130,7 +1247,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="global-content-blocks">
     <vulnerability>
       <title>Global Content Blocks plugin &lt;= 1.2 SQL Injection Vulnerability</title>
@@ -1138,7 +1254,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="ajaxgallery">
     <vulnerability>
       <title>Ajax Gallery plugin &lt;= 3.0 SQL Injection Vulnerability</title>
@@ -1146,7 +1261,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-ds-faq">
     <vulnerability>
       <title>WP DS FAQ plugin &lt;= 1.3.2 SQL Injection Vulnerability</title>
@@ -1154,7 +1268,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="odihost-newsletter-plugin">
     <vulnerability>
       <title>OdiHost Newsletter plugin &lt;= 1.0 SQL Injection Vulnerability</title>
@@ -1162,7 +1275,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="easy-contact-form-lite">
     <vulnerability>
       <title>Easy Contact Form Lite plugin &lt;= 1.0.7 SQL Injection Vulnerability</title>
@@ -1170,7 +1282,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-symposium">
     <vulnerability>
       <title>WP Symposium plugin &lt;= 0.64 SQL Injection Vulnerability</title>
@@ -1178,7 +1289,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="contus-hd-flv-player">
     <vulnerability>
       <title>Contus HD FLV Player plugin &lt;= 1.3 SQL Injection Vulnerability</title>
@@ -1186,7 +1296,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="file-groups">
     <vulnerability>
       <title>File Groups plugin &lt;= 1.1.2 SQL Injection Vulnerability</title>
@@ -1194,7 +1303,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="ip-logger">
     <vulnerability>
       <title>IP-Logger plugin &lt;= 3.0 SQL Injection Vulnerability</title>
@@ -1202,7 +1310,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="beer-recipes">
     <vulnerability>
       <title>Beer Recipes v.1.0 XSS</title>
@@ -1210,7 +1317,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="is-human">
     <vulnerability>
       <title>Is-human &lt;=1.4.2 Remote Command Execution Vulnerability</title>
@@ -1218,7 +1324,6 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
-
   <plugin name="editormonkey">
     <vulnerability>
       <title>EditorMonkey plugin (FCKeditor) Arbitrary File Upload</title>
@@ -1226,7 +1331,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="sermon-browser">
     <vulnerability>
       <title>SermonBrowser 0.43 SQL Injection</title>
@@ -1234,7 +1338,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="ajax-category-dropdown">
     <vulnerability>
       <title>Ajax Category Dropdown 0.1.5 Multiple Vulnerabilities</title>
@@ -1242,7 +1345,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-custom-pages">
     <vulnerability>
       <title>WP Custom Pages 0.5.0.1 LFI Vulnerability</title>
@@ -1250,8 +1352,12 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="flash-album-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
     <vulnerability>
       <title>GRAND Flash Album Gallery 1.9.0 and 2.0.0 Multiple Vulnerabilities</title>
       <reference>http://packetstormsecurity.org/files/117665/</reference>
@@ -1273,7 +1379,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="php_speedy_wp">
     <vulnerability>
       <title>PHP Speedy &lt;= 0.5.2 (admin_container.php) Remote Code Exec Exploit</title>
@@ -1281,7 +1386,6 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
-
   <plugin name="old-post-spinner">
     <vulnerability>
       <title>OPS Old Post Spinner 2.2.1 LFI Vulnerability</title>
@@ -1289,7 +1393,6 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="jquery-mega-menu">
     <vulnerability>
       <title>jQuery Mega Menu 1.0 Local File Inclusion</title>
@@ -1297,7 +1400,6 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="iwant-one-ihave-one">
     <vulnerability>
       <title>IWantOneButton 3.0.1 Multiple Vulnerabilities</title>
@@ -1305,7 +1407,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="forum-server">
     <vulnerability>
       <title>WP Forum Server 1.6.5 SQL Injection Vulnerability</title>
@@ -1323,7 +1424,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="relevanssi">
     <vulnerability>
       <title>Relevanssi 2.7.2 Stored XSS Vulnerability</title>
@@ -1331,7 +1431,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="gigpress">
     <vulnerability>
       <title>GigPress 2.1.10 Stored XSS Vulnerability</title>
@@ -1339,7 +1438,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="comment-rating">
     <vulnerability>
       <title>Comment Rating 2.9.23 Multiple Vulnerabilities</title>
@@ -1347,7 +1445,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="z-vote">
     <vulnerability>
       <title>Z-Vote 1.1 SQL Injection Vulnerability</title>
@@ -1355,7 +1452,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="user-photo">
     <vulnerability>
       <title>User Photo Component Remote File Upload Vulnerability</title>
@@ -1363,7 +1459,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="enable-media-replace">
     <vulnerability>
       <title>Enable Media Replace Multiple Vulnerabilities</title>
@@ -1371,7 +1466,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="mingle-forum">
     <vulnerability>
       <title>Mingle Forum &lt;= 1.0.32.1 Cross Site Scripting / SQL Injection</title>
@@ -1394,7 +1488,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="accept-signups">
     <vulnerability>
       <title>Accept Signups 0.1 XSS</title>
@@ -1402,7 +1495,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="events-manager-extended">
     <vulnerability>
       <title>Events Manager Extended Persistent XSS Vulnerability</title>
@@ -1410,7 +1502,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="nextgen-smooth-gallery">
     <vulnerability>
       <title>NextGEN Smooth Gallery Blind SQL Injection Vulnerability</title>
@@ -1418,7 +1509,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="mylinksdump">
     <vulnerability>
       <title>myLDlinker SQL Injection Vulnerability</title>
@@ -1426,7 +1516,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="firestats">
     <vulnerability>
       <title>Firestats Remote Configuration File Download</title>
@@ -1434,7 +1523,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="simple-press">
     <vulnerability>
       <title>Simple:Press SQL Injection Vulnerability</title>
@@ -1442,7 +1530,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="cimy-counter">
     <vulnerability>
       <title>Vulnerabilities in Cimy Counter for WordPress</title>
@@ -1450,15 +1537,18 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="nextgen-gallery">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
     <vulnerability>
       <title>XSS in NextGEN Gallery &lt;= 1.5.1</title>
       <reference>http://www.exploit-db.com/exploits/12098/</reference>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="cpl">
     <vulnerability>
       <title>Copperleaf Photolog SQL injection</title>
@@ -1466,7 +1556,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="events-calendar">
     <vulnerability>
       <title>Events SQL Injection Vulnerability</title>
@@ -1474,7 +1563,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="ImageManager">
     <vulnerability>
       <title>Image Manager Plugins Shell Upload Vulnerability</title>
@@ -1482,7 +1570,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-cumulus">
     <vulnerability>
       <title>Vulnerabilities in WP-Cumulus &lt;= 1.20 for WordPress</title>
@@ -1495,7 +1582,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-syntax">
     <vulnerability>
       <title>WP-Syntax &lt;= 0.9.1 Remote Command Execution</title>
@@ -1503,7 +1589,6 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
-
   <plugin name="my-category-order">
     <vulnerability>
       <title>My Category Order &lt;= 2.8 SQL Injection Vulnerability</title>
@@ -1511,7 +1596,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="related-sites">
     <vulnerability>
       <title>Related Sites 2.1 Blind SQL Injection Vulnerability</title>
@@ -1519,8 +1603,12 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="dm-albums">
+    <vulnerability>
+      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
+      <type>XSS</type>
+    </vulnerability>
     <vulnerability>
       <title>DM Albums 1.9.2 Remote File Disclosure Vulnerability</title>
       <reference>http://www.exploit-db.com/exploits/9048/</reference>
@@ -1533,7 +1621,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/dm-albums/template/album.php?SECURITY_FILE=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="photoracer">
     <vulnerability>
       <title>Photoracer 1.0 (id) SQL Injection Vulnerability</title>
@@ -1551,7 +1638,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-lytebox">
     <vulnerability>
       <title>Lytebox (wp-lytebox) Local File Inclusion Vulnerability</title>
@@ -1559,7 +1645,6 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="fmoblog">
     <vulnerability>
       <title>fMoblog 2.1 (id) SQL Injection Vulnerability</title>
@@ -1567,7 +1652,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="page-flip-image-gallery">
     <vulnerability>
       <title>Page Flip Image Gallery &lt;= 0.2.2 Remote FD Vuln</title>
@@ -1575,7 +1659,6 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-shopping-cart">
     <vulnerability>
       <title>e-Commerce &lt;= 3.4 Arbitrary File Upload Exploit</title>
@@ -1583,7 +1666,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="downloads-manager">
     <vulnerability>
       <title>Download Manager 0.2 Arbitrary File Upload Exploit</title>
@@ -1591,7 +1673,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wpSS">
     <vulnerability>
       <title>Spreadsheet &lt;= 0.6 SQL Injection Vulnerability</title>
@@ -1599,7 +1680,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-download">
     <vulnerability>
       <title>Download (dl_id) SQL Injection Vulnerability</title>
@@ -1607,7 +1687,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="sniplets">
     <vulnerability>
       <title>Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities</title>
@@ -1615,7 +1694,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-photo-album">
     <vulnerability>
       <title>Photo album Remote SQL Injection Vulnerability</title>
@@ -1623,7 +1701,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="sf-forum">
     <vulnerability>
       <title>Simple Forum 2.0-2.1 SQL Injection Vulnerability</title>
@@ -1636,7 +1713,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="st_newsletter">
     <vulnerability>
       <title>st_newsletter Remote SQL Injection Vulnerability</title>
@@ -1649,7 +1725,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wordspew">
     <vulnerability>
       <title>Wordspew Remote SQL Injection Vulnerability</title>
@@ -1657,7 +1732,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="dmsguestbook">
     <vulnerability>
       <title>dmsguestbook 1.7.0 Multiple Remote Vulnerabilities</title>
@@ -1665,7 +1739,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wassup">
     <vulnerability>
       <title>WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit</title>
@@ -1673,7 +1746,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-adserve">
     <vulnerability>
       <title>Adserve 0.2 adclick.php SQL Injection Exploit</title>
@@ -1681,7 +1753,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="fgallery">
     <vulnerability>
       <title>plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability</title>
@@ -1689,7 +1760,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-cal">
     <vulnerability>
       <title>WP-Cal 0.3 editevent.php SQL Injection Vulnerability</title>
@@ -1697,7 +1767,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wpforum">
     <vulnerability>
       <title>plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability</title>
@@ -1710,7 +1779,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-filemanager">
     <vulnerability>
       <title>Wp-FileManager 1.2 Remote Upload Vulnerability</title>
@@ -1718,7 +1786,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="pictpress">
     <vulnerability>
       <title>PictPress &lt;= 0.91 Remote File Disclosure Vulnerability</title>
@@ -1726,7 +1793,6 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="backupwordpress">
     <vulnerability>
       <title>BackUp&lt;= 0.4.2b RFI Vulnerability</title>
@@ -1735,7 +1801,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/BackUp/Archive.php?bkpwp_plugin_path=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="myflash">
     <vulnerability>
       <title>plugin myflash &lt;= 1.00 (wppath) RFI Vulnerability</title>
@@ -1744,7 +1809,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/myflash/myflash-button.php?wpPATH=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="wordtube">
     <vulnerability>
       <title>plugin wordTube &lt;= 1.43 (wpPATH) RFI Vulnerability</title>
@@ -1753,7 +1817,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/wordtube/wordtube-button.php?wpPATH=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-table">
     <vulnerability>
       <title>plugin wp-Table &lt;= 1.43 (inc_dir) RFI Vulnerability</title>
@@ -1762,7 +1825,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/wp-table/js/wptable-button.phpp?wpPATH=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="mygallery">
     <vulnerability>
       <title>myGallery &lt;= 1.4b4 Remote File Inclusion Vulnerability</title>
@@ -1771,7 +1833,6 @@ File Upload Vulnerability</title>
       <uri>/mygallery/myfunctions/mygallerybrowser.php?myPath=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="sendit">
     <vulnerability>
       <title>SendIt plugin &lt;= 1.5.9 Blind SQL Injection Vulnerability</title>
@@ -1779,7 +1840,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="js-appointment">
     <vulnerability>
       <title>Js-appointment plugin &lt;= 1.5 SQL Injection Vulnerability</title>
@@ -1787,7 +1847,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="mm-forms-community">
     <vulnerability>
       <title>MM Forms Community &lt;= 1.2.3 SQL Injection Vulnerability</title>
@@ -1800,7 +1859,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="super-captcha">
     <vulnerability>
       <title>Super CAPTCHA plugin &lt;= 2.2.4 SQL Injection Vulnerability</title>
@@ -1808,7 +1866,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="collision-testimonials">
     <vulnerability>
       <title>Collision Testimonials plugin &lt;= 3.0 SQL Injection Vulnerability</title>
@@ -1816,7 +1873,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="oqey-headers">
     <vulnerability>
       <title>Oqey Headers plugin &lt;= 0.3 SQL Injection Vulnerability</title>
@@ -1824,7 +1880,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="fbpromotions">
     <vulnerability>
       <title>Facebook Promotions plugin &lt;= 1.3.3 SQL Injection Vulnerability</title>
@@ -1832,7 +1887,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="evarisk">
     <vulnerability>
       <title>Evarisk plugin &lt;= 5.1.3.6 SQL Injection Vulnerability</title>
@@ -1845,7 +1899,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="profiles">
     <vulnerability>
       <title>Profiles plugin &lt;= 2.0 RC1 SQL Injection Vulnerability</title>
@@ -1853,7 +1906,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="mystat">
     <vulnerability>
       <title>mySTAT plugin &lt;= 2.6 SQL Injection Vulnerability</title>
@@ -1861,7 +1913,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="sh-slideshow">
     <vulnerability>
       <title>SH Slideshow plugin &lt;= 3.1.4 SQL Injection Vulnerability</title>
@@ -1869,7 +1920,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="copyright-licensing-tools">
     <vulnerability>
       <title>iCopyright(R) Article Tools plugin &lt;= 1.1.4 SQL Injection Vulnerability</title>
@@ -1877,7 +1927,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="advertizer">
     <vulnerability>
       <title>Advertizer plugin &lt;= 1.0 SQL Injection Vulnerability</title>
@@ -1885,7 +1934,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="event-registration">
     <vulnerability>
       <title>Event Registration plugin &lt;= 5.44 SQL Injection Vulnerability</title>
@@ -1903,7 +1951,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="crawlrate-tracker">
     <vulnerability>
       <title>Craw Rate Tracker plugin &lt;= 2.0.2 SQL Injection Vulnerability</title>
@@ -1911,7 +1958,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-audio-gallery-playlist">
     <vulnerability>
       <title>wp audio gallery playlist plugin &lt;= 0.12 SQL Injection Vulnerability</title>
@@ -1919,7 +1965,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="yolink-search">
     <vulnerability>
       <title>yolink Search plugin &lt;= 1.1.4 SQL Injection Vulnerability</title>
@@ -1927,7 +1972,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="pure-html">
     <vulnerability>
       <title>PureHTML plugin &lt;= 1.0.0 SQL Injection Vulnerability</title>
@@ -1935,7 +1979,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="couponer">
     <vulnerability>
       <title>Couponer plugin &lt;= 1.2 SQL Injection Vulnerability</title>
@@ -1943,7 +1986,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="grapefile">
     <vulnerability>
       <title>grapefile plugin &lt;= 1.1 Arbitrary File Upload</title>
@@ -1951,7 +1993,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="image-gallery-with-slideshow">
     <vulnerability>
       <title>image-gallery-with-slideshow plugin &lt;= 1.5 Arbitrary File Upload / SQL Injection</title>
@@ -1959,7 +2000,6 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wordpress-donation-plugin-with-goals-and-paypal-ipn-by-nonprofitcmsorg">
     <vulnerability>
       <title>Donation plugin &lt;= 1.0 SQL Injection Vulnerability</title>
@@ -1967,7 +2007,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-bannerize">
     <vulnerability>
       <title>WP Bannerize plugin &lt;= 2.8.6 SQL Injection Vulnerability</title>
@@ -1980,7 +2019,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="search-autocomplete">
     <vulnerability>
       <title>SearchAutocomplete plugin &lt;= 1.0.8 SQL Injection Vulnerability</title>
@@ -1988,7 +2026,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="videowhisper-video-presentation">
     <vulnerability>
       <title>VideoWhisper Video Presentation plugin &lt;= 1.1 SQL Injection Vulnerability</title>
@@ -1996,7 +2033,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="facebook-opengraph-meta-plugin">
     <vulnerability>
       <title>Facebook Opengraph Meta plugin &lt;= 1.0 SQL Injection Vulnerability</title>
@@ -2004,7 +2040,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="zotpress">
     <vulnerability>
       <title>Zotpress plugin &lt;= 4.4 SQL Injection Vulnerability</title>
@@ -2012,7 +2047,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="oqey-gallery">
     <vulnerability>
       <title>oQey Gallery plugin &lt;= 0.4.8 SQL Injection Vulnerability</title>
@@ -2020,7 +2054,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="tweet-old-post">
     <vulnerability>
       <title>Tweet Old Post plugin &lt;= 3.2.5 SQL Injection Vulnerability</title>
@@ -2028,7 +2061,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="post-highlights">
     <vulnerability>
       <title>post highlights plugin &lt;= 2.2 SQL Injection Vulnerability</title>
@@ -2036,7 +2068,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="knr-author-list-widget">
     <vulnerability>
       <title>KNR Author List Widget plugin &lt;= 2.0.0 SQL Injection Vulnerability</title>
@@ -2044,7 +2075,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="scormcloud">
     <vulnerability>
       <title>SCORM Cloud plugin &lt;= 1.0.6.6 SQL Injection Vulnerability</title>
@@ -2052,7 +2082,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="eventify">
     <vulnerability>
       <title>Eventify - Simple Events plugin &lt;= 1.7.f SQL Injection Vulnerability</title>
@@ -2060,7 +2089,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="paid-downloads">
     <vulnerability>
       <title>Paid Downloads plugin &lt;= 2.01 SQL Injection Vulnerability</title>
@@ -2068,7 +2096,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="community-events">
     <vulnerability>
       <title>Community Events plugin &lt;= 1.2.1 SQL Injection Vulnerability</title>
@@ -2076,7 +2103,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="1-flash-gallery">
     <vulnerability>
       <title>1 Flash Gallery Arbiraty File Upload Exploit (MSF)</title>
@@ -2084,7 +2110,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-filebase">
     <vulnerability>
       <title>WP-Filebase Download Manager plugin &lt;= 0.2.9 SQL Injection Vulnerability</title>
@@ -2092,7 +2117,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="a-to-z-category-listing">
     <vulnerability>
       <title>A to Z Category Listing plugin &lt;= 1.3 SQL Injection Vulnerability</title>
@@ -2100,7 +2124,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-e-commerce">
     <vulnerability>
       <title>WP e-Commerce plugin &lt;= 3.8.6 SQL Injection Vulnerability</title>
@@ -2108,7 +2131,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="filedownload">
     <vulnerability>
       <title>Filedownload 0.1 (download.php) Remote File Disclosure Vulnerability</title>
@@ -2116,7 +2138,6 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="thecartpress">
     <vulnerability>
       <title>TheCartPress &lt;= 1.6 Cross Site Sripting</title>
@@ -2130,7 +2151,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/thecartpress/checkout/CheckoutEditor.php?tcp_save_fields=true&amp;tcp_class_name=asdf&amp;tcp_class_path=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="wpeasystats">
     <vulnerability>
       <title>WPEasyStats 1.8 Remote File Inclusion</title>
@@ -2139,7 +2159,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/wpeasystats/export.php?homep=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="annonces">
     <vulnerability>
       <title>Annonces 1.2.0.0 Remote File Inclusion</title>
@@ -2148,7 +2167,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/annonces/includes/lib/photo/uploadPhoto.php?abspath=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="livesig">
     <vulnerability>
       <title>Livesig 0.4 Remote File Inclusion</title>
@@ -2158,7 +2176,6 @@ File Upload Vulnerability</title>
       <postdata>wp-root=XXpathXX&amp;action=asdf</postdata>
     </vulnerability>
   </plugin>
-
   <plugin name="disclosure-policy-plugin">
     <vulnerability>
       <title>Disclosure Policy 1.0 Remote File Inclusion</title>
@@ -2167,7 +2184,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/disclosure-policy-plugin/functions/action.php?delete=asdf&amp;blogUrl=asdf&amp;abspath=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="mailz">
     <vulnerability>
       <title>Mailing List 1.3.2 Remote File Inclusion</title>
@@ -2181,7 +2197,6 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
-
   <plugin name="g-web-shop">
     <vulnerability>
       <title>Zingiri Web Shop 2.2.0 Remote File Inclusion</title>
@@ -2195,7 +2210,6 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
-
   <plugin name="mini-mail-dashboard-widget">
     <vulnerability>
       <title>Mini Mail Dashboard Widget 1.36 Remote File Inclusion</title>
@@ -2208,7 +2222,6 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
-
   <plugin name="relocate-upload">
     <vulnerability>
       <title>Relocate Upload 0.14 Remote File Inclusion</title>
@@ -2217,7 +2230,6 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/relocate-upload/relocate-upload.php?ru_folder=asdf&amp;abspath=XXpathXX</uri>
     </vulnerability>
   </plugin>
-
   <plugin name="category-grid-view-gallery">
     <vulnerability>
       <title>Category Grid View Gallery plugin 0.1.1 Shell Upload vulnerability</title>
@@ -2225,7 +2237,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="auto-attachments">
     <vulnerability>
       <title>Auto Attachments plugin 0.2.9 Shell Upload vulnerability</title>
@@ -2233,7 +2244,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-marketplace">
     <vulnerability>
       <title>WP Marketplace plugin 1.1.0 Shell Upload vulnerability</title>
@@ -2241,7 +2251,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="dp-thumbnail">
     <vulnerability>
       <title>DP Thumbnail plugin 1.0 Shell Upload vulnerability</title>
@@ -2249,7 +2258,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="vk-gallery">
     <vulnerability>
       <title>Vk Gallery plugin 1.1.0 Shell Upload vulnerability</title>
@@ -2257,7 +2265,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="rekt-slideshow">
     <vulnerability>
       <title>Rekt Slideshow plugin 1.0.5 Shell Upload vulnerability</title>
@@ -2265,7 +2272,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="cac-featured-content">
     <vulnerability>
       <title>CAC Featured Content plugin 0.8 Shell Upload vulnerability</title>
@@ -2273,7 +2279,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="rent-a-car">
     <vulnerability>
       <title>Rent A Car plugin 1.0 Shell Upload vulnerability</title>
@@ -2281,7 +2286,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="lisl-last-image-slider">
     <vulnerability>
       <title>LISL Last Image Slider plugin 1.0 Shell Upload vulnerability</title>
@@ -2289,7 +2293,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="islidex">
     <vulnerability>
       <title>Islidex plugin 2.7 Shell Upload vulnerability</title>
@@ -2297,7 +2300,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="kino-gallery">
     <vulnerability>
       <title>Kino Gallery plugin 1.0 Shell Upload vulnerability</title>
@@ -2305,7 +2307,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="cms-pack-cache">
     <vulnerability>
       <title>Cms Pack plugin 1.3 Shell Upload vulnerability</title>
@@ -2313,7 +2314,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="a-gallery">
     <vulnerability>
       <title>A Gallery plugin 0.9 Shell Upload vulnerability</title>
@@ -2321,7 +2321,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="category-list-portfolio-page">
     <vulnerability>
       <title>Category List Portfolio Page plugin 0.9 Shell Upload vulnerability</title>
@@ -2329,7 +2328,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="really-easy-slider">
     <vulnerability>
       <title>Really Easy Slider plugin 0.1 Shell Upload vulnerability</title>
@@ -2337,7 +2335,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="verve-meta-boxes">
     <vulnerability>
       <title>Verve Meta Boxes plugin 1.2.8 Shell Upload vulnerability</title>
@@ -2345,7 +2342,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="user-avatar">
     <vulnerability>
       <title>User Avatar plugin 1.3.7 shell upload vulnerability</title>
@@ -2353,7 +2349,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="extend-wordpress">
     <vulnerability>
       <title>Extend plugin 1.3.7 Shell Upload vulnerability</title>
@@ -2361,7 +2356,6 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
-
   <plugin name="adrotate">
     <vulnerability>
       <title>AdRotate plugin &lt;= 3.6.5 SQL Injection Vulnerability</title>
@@ -2374,7 +2368,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-spamfree">
     <vulnerability>
       <title>WP-SpamFree 3.2.1 Spam SQL Injection Vulnerability</title>
@@ -2382,7 +2375,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="gd-star-rating">
     <vulnerability>
       <title>GD Star Rating plugin &lt;= 1.9.10 SQL Injection</title>
@@ -2395,7 +2387,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="contact-form-wordpress">
     <vulnerability>
       <title>Contact Form plugin &lt;= 2.7.5 SQL Injection</title>
@@ -2403,7 +2394,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="wp-photo-album-plus">
     <vulnerability>
       <title>WP Photo Album Plus &lt;= 4.1.1 SQL Injection</title>
@@ -2411,7 +2401,6 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
-
   <plugin name="backwpup">
     <vulnerability>
       <title>BackWPUp 2.1.4 Code Execution</title>
@@ -2424,5 +2413,5 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
-
 </vulnerabilities>
+