From f704efb2afcd34a0cee6e57b7c921ff93323664d Mon Sep 17 00:00:00 2001
From: ethicalhack3r <ryandewhurst@gmail.com>
Date: Fri, 23 Aug 2013 12:55:04 +0200
Subject: [PATCH] Vulnerable plugin updates. See Issue #264

---
 data/plugin_vulns.xml | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index 8538cbb7..c3fc562c 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -1466,6 +1466,12 @@
   </plugin>
 
   <plugin name="download-monitor">
+    <vulnerability>
+      <title>CVE-2013-5098: Download Monitor &lt; 3.3.6.2 Cross Site Scripting</title>
+      <reference>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5098</reference>
+      <type>XSS</type>
+      <fixed_in>3.3.6.2</fixed_in>
+    </vulnerability>
     <vulnerability>
       <title>Download Monitor &lt;= 3.3.5.7 Cross Site Scripting</title>
       <reference>http://www.reactionpenetrationtesting.co.uk/wordpress-download-monitor-xss.html</reference>
@@ -5014,7 +5020,7 @@
 
   <plugin name="duplicator">
     <vulnerability>
-      <title>Duplicator installer.cleanup.php package Parameter XSS</title>
+      <title>CVE-2013-4625: Duplicator installer.cleanup.php package Parameter XSS</title>
       <reference>http://osvdb.org/95627</reference>
       <type>XSS</type>
       <fixed_in>0.4.5</fixed_in>
@@ -5048,4 +5054,22 @@
     </vulnerability>
   </plugin>
 
+  <plugin name="xhanch-my-twitter">
+    <vulnerability>
+      <title>CVE-2013-3253: CSRF in admin/setting.php in Xhanch</title>
+      <reference>https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3253</reference>
+      <type>CSRF</type>
+      <fixed_in>2.7.7</fixed_in>
+    </vulnerability>
+  </plugin>
+
+  <plugin name="sexybookmarks">
+    <vulnerability>
+      <title>CVE-2013-3256: CSRF in sexybookmarks</title>
+      <reference>http://wordpress.org/plugins/sexybookmarks/changelog/</reference>
+      <type>CSRF</type>
+      <fixed_in>6.1.5.0</fixed_in>
+    </vulnerability>
+  </plugin>
+
 </vulnerabilities>