From f8ba2b71f8d15341cc44fae2c71e5c97c265b960 Mon Sep 17 00:00:00 2001
From: erwanlr <erwan.lr@gmail.com>
Date: Sun, 6 Jan 2013 15:02:39 +0100
Subject: [PATCH] Added Moneymasters FDP & File upload

---
 data/plugin_vulns.xml   | 316 ++++++++++++++++++++++++++++++++++++++++
 data/wp_theme_vulns.xml |  16 +-
 2 files changed, 331 insertions(+), 1 deletion(-)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index 7d8deb72..a808caed 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -30,6 +30,7 @@ ryandewhurst at gmail
 
 -->
 <vulnerabilities>
+
   <plugin name="wp-useronline">
     <vulnerability>
       <title>WP-UserOnline Full Path Disclosure</title>
@@ -42,6 +43,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="levelfourstorefront">
     <vulnerability>
       <title>Shopping Cart 8.1.14 Shell Upload / SQL Injection</title>
@@ -49,6 +51,7 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="reflex-gallery">
     <vulnerability>
       <title>ReFlex Gallery &lt;= 1.4 Shell Upload</title>
@@ -56,6 +59,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="uploader">
     <vulnerability>
       <title>Uploader 1.0.4 Shell Upload</title>
@@ -63,6 +67,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="xerte-online">
     <vulnerability>
       <title>Xerte Online 0.32 Shell Upload</title>
@@ -70,6 +75,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="advanced-custom-fields">
     <vulnerability>
       <title>Advanced Custom Fields &lt;= 3.5.1 Remote File Inclusion</title>
@@ -77,6 +83,7 @@ ryandewhurst at gmail
       <type>RFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sitepress-multilingual-cms">
     <vulnerability>
       <title>Wordpress sitepress-multilingual-cms Full Path Disclosure</title>
@@ -84,6 +91,7 @@ ryandewhurst at gmail
       <type>FPD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="asset-manager">
     <vulnerability>
       <title>WordPress plugin Asset manager upload.php Arbitrary Code Execution</title>
@@ -91,6 +99,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="apptha-banner">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -98,6 +107,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="apptha-slider-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -105,6 +115,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="blaze-slide-show-for-wordpress">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -112,6 +123,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="comment-extra-field">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -119,6 +131,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="fluid-accessible-rich-inline-edit">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -126,6 +139,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="fluid-accessible-pager">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -133,6 +147,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="fluid-accessible-uploader">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -140,6 +155,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="fluid-accessible-ui-options">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -147,6 +163,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="fresh-page">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -154,6 +171,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mac-dock-photogallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -161,6 +179,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="pdw-file-browser">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -168,6 +187,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="power-zoomer">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -175,6 +195,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="slide-show-pro">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -182,6 +203,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="smart-slide-show">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -189,6 +211,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="spotlightyour">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -196,6 +219,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sprapid">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -203,6 +227,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ultimate-tinymce">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -210,6 +235,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-3dbanner-rotator">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -217,6 +243,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-3dflick-slideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -224,6 +251,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-bliss-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -231,6 +259,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-carouselslideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -238,6 +267,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-dreamworkgallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -245,6 +275,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-ecommerce-cvs-importer">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -252,6 +283,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-extended">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -259,6 +291,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-flipslideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -266,6 +299,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-homepage-slideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -273,6 +307,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-image-news-slider">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -280,6 +315,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-levoslideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -287,6 +323,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-matrix-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -294,6 +331,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-powerplaygallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -301,6 +339,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-royal-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -308,6 +347,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-superb-slideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -315,6 +355,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-vertical-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -322,6 +363,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-yasslideshow">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -329,6 +371,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="cardoza-ajax-search">
     <vulnerability>
       <title>Ajax Post Search 1.1 Sql Injection</title>
@@ -336,6 +379,7 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="answer-my-question">
     <vulnerability>
       <title>Answer My Question 1.1 Multiple XSS</title>
@@ -343,6 +387,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="catalog">
     <vulnerability>
       <title>Catalog HTML Code Injection and Cross-site scripting</title>
@@ -350,6 +395,7 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wordfence">
     <vulnerability>
       <title>Wordfence 3.3.5 XSS and IAA</title>
@@ -357,6 +403,7 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="slideshow-jquery-image-gallery">
     <vulnerability>
       <title>Slideshow jQuery Image Gallery  Multiple Vulnerabilities</title>
@@ -364,6 +411,7 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="social-discussions">
     <vulnerability>
       <title>Social Discussions Multiple Vulnerabilities</title>
@@ -371,6 +419,7 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="abtest">
     <vulnerability>
       <title>ABtest Directory Traversal </title>
@@ -378,6 +427,7 @@ ryandewhurst at gmail
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="bbpress">
     <vulnerability>
       <title>BBPress SQL Injection / Path Disclosure</title>
@@ -385,6 +435,7 @@ ryandewhurst at gmail
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="nextgen_cu3er_gallery">
     <vulnerability>
       <title>NextGen Cu3er Gallery Information Disclosure</title>
@@ -392,6 +443,7 @@ ryandewhurst at gmail
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="rich-widget">
     <vulnerability>
       <title>Rich Widget File Upload</title>
@@ -399,6 +451,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="monsters-editor-10-for-wp-super-edit">
     <vulnerability>
       <title>Monsters Editor Shell Upload</title>
@@ -406,6 +459,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="quick-post-widget">
     <vulnerability>
       <title>Quick Post Widget 1.9.1 Multiple Cross-site scripting vulnerabilities</title>
@@ -413,6 +467,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="threewp-email-reflector">
     <vulnerability>
       <title>ThreeWP Email Reflector 1.13 Stored XSS</title>
@@ -420,6 +475,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-simplemail">
     <vulnerability>
       <title>SimpleMail 1.0.6 Stored XSS</title>
@@ -427,6 +483,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="postie">
     <vulnerability>
       <title>Postie 1.4.3 Stored XSS</title>
@@ -434,6 +491,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="rsvpmaker">
     <vulnerability>
       <title>RSVPMaker v2.5.4 Persistent XSS</title>
@@ -441,6 +499,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mz-jajak">
     <vulnerability>
       <title>Mz-jajak &lt;= 2.1 SQL Injection Vulnerability</title>
@@ -448,6 +507,7 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="resume-submissions-job-postings">
     <vulnerability>
       <title>Resume Submissions Job Posting v2.5.1 Unrestricted File Upload</title>
@@ -455,6 +515,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-predict">
     <vulnerability>
       <title>WP-Predict v1.0 Blind SQL Injection</title>
@@ -462,6 +523,7 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="backup">
     <vulnerability>
       <title>Backup Plugin 2.0.1 Information Disclosure</title>
@@ -469,6 +531,7 @@ ryandewhurst at gmail
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="moodthingy-mood-rating-widget">
     <vulnerability>
       <title>MoodThingy Widget v0.8.7 Blind SQL Injection</title>
@@ -476,6 +539,7 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="paid-business-listings">
     <vulnerability>
       <title>Paid Business Listings v1.0.2 Blind SQL Injection</title>
@@ -483,6 +547,7 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="website-faq">
     <vulnerability>
       <title>Website FAQ Plugin v1.0 SQL Injection</title>
@@ -490,6 +555,7 @@ ryandewhurst at gmail
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="radykal-fancy-gallery">
     <vulnerability>
       <title>Fancy Gallery 1.2.4 Shell Upload</title>
@@ -497,6 +563,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="flipbook">
     <vulnerability>
       <title>Flip Book 1.0 Shell Upload</title>
@@ -504,6 +571,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ajax_multi_upload">
     <vulnerability>
       <title>Ajax Multi Upload 1.1 Shell Upload</title>
@@ -511,6 +579,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="schreikasten">
     <vulnerability>
       <title>Schreikasten 0.14.13 XSS</title>
@@ -518,6 +587,7 @@ ryandewhurst at gmail
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-automatic">
     <vulnerability>
       <title>Wordpress Automatic 2.0.3 CSRF</title>
@@ -525,6 +595,7 @@ ryandewhurst at gmail
       <type>CSRF</type>
     </vulnerability>
   </plugin>
+
   <plugin name="videowhisper-video-conference-integration">
     <vulnerability>
       <title>VideoWhisper Video Conference
@@ -533,6 +604,7 @@ ryandewhurst at gmail
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="auctionplugin">
     <vulnerability>
       <title>Auctions Plugin 2.0.1.3 Arbitrary
@@ -541,6 +613,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="lb-mixed-slideshow">
     <vulnerability>
       <title>LB Mixed Slideshow 1.0 Arbitrary File Upload Vulnerability</title>
@@ -548,6 +621,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="lim4wp">
     <vulnerability>
       <title>Lim4wp 1.1.1 Arbitrary File Upload Vulnerability</title>
@@ -555,6 +629,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-imagezoom">
     <vulnerability>
       <title>Wp-ImageZoom 1.0.3 Remote File Disclosure</title>
@@ -562,6 +637,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="invit0r">
     <vulnerability>
       <title>Invit0r 0.22 Shell Upload</title>
@@ -569,6 +645,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="announces">
     <vulnerability>
       <title>Annonces 1.2.0.1 Shell Upload</title>
@@ -576,6 +653,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="contus-video-galleryversion-10">
     <vulnerability>
       <title>Contus Video Gallery 1.3 Arbitrary
@@ -584,6 +662,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="contus-hd-flv-player">
     <vulnerability>
       <title>Contus HD FLV Player 1.7 Arbitrary
@@ -592,6 +671,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="user-meta">
     <vulnerability>
       <title>User Meta Version 1.1.1 Arbitrary File Upload Vulnerability</title>
@@ -599,6 +679,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="topquark">
     <vulnerability>
       <title>Top Quark Architecture Version 2.10 Arbitrary File Upload Vulnerability</title>
@@ -606,6 +687,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sfbrowser">
     <vulnerability>
       <title>SfBrowser Version 1.4.5 Arbitrary File Upload Vulnerability</title>
@@ -613,6 +695,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="pica-photo-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -625,6 +708,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mac-dock-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -637,6 +721,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="drag-drop-file-uploader">
     <vulnerability>
       <title>drag and drop file upload 0.1 Arbitrary File Upload Vulnerability</title>
@@ -644,6 +729,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="custom-content-type-manager">
     <vulnerability>
       <title>Custom Content Type Manager 0.9.5.13-pl Arbitrary File Upload Vulnerability</title>
@@ -651,6 +737,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-gpx-map">
     <vulnerability>
       <title>wp-gpx-max version 1.1.21 Arbitrary File Upload</title>
@@ -658,6 +745,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="front-file-manager">
     <vulnerability>
       <title>Front File Manager Plugin 0.1 Arbitrary File Upload</title>
@@ -665,6 +753,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="front-end-upload">
     <vulnerability>
       <title>Front End Upload 0.5.3 Arbitrary File Upload</title>
@@ -677,6 +766,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="omni-secure-files">
     <vulnerability>
       <title>Omni Secure Files 0.1.13 Arbitrary File Upload</title>
@@ -684,6 +774,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="easy-contact-forms-exporter">
     <vulnerability>
       <title>Easy Contact Forms Export 1.1.0 Information Disclosure Vulnerability</title>
@@ -691,6 +782,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="pica-photo-gallery">
     <vulnerability>
       <title>PICA Photo Gallery 1.0 Remote File Disclosure</title>
@@ -698,6 +790,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="plugin-newsletter">
     <vulnerability>
       <title>Plugin: Newsletter 1.5 Remote File Disclosure Vulnerability</title>
@@ -705,6 +798,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="rbxgallery">
     <vulnerability>
       <title>RBX Gallery 2.1 Arbitrary File Upload</title>
@@ -712,6 +806,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="simple-download-button-shortcode">
     <vulnerability>
       <title>Simple Download Button Shortcode 1.0 Remote File Disclosure</title>
@@ -719,6 +814,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="thinkun-remind">
     <vulnerability>
       <title>Thinkun Remind 1.1.3 Remote File Disclosure</title>
@@ -726,6 +822,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="tinymce-thumbnail-gallery">
     <vulnerability>
       <title>Tinymce Thumbnail Gallery 1.0.7 Remote File Disclosure</title>
@@ -733,6 +830,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wpstorecart">
     <vulnerability>
       <title>wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload</title>
@@ -740,6 +838,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="gallery-plugin">
     <vulnerability>
       <title>Gallery 3.06 Arbitrary File Upload</title>
@@ -747,6 +846,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="font-uploader">
     <vulnerability>
       <title>Font Uploader 1.2.4 Arbitrary File Upload</title>
@@ -754,6 +854,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-property">
     <vulnerability>
       <title>WP-Property 1.35.0 Arbitrary File Upload</title>
@@ -761,6 +862,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wpmarketplace">
     <vulnerability>
       <title>WP Marketplace 1.5.0 - 1.6.1 Arbitrary File Upload</title>
@@ -768,6 +870,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="store-locator-le">
     <vulnerability>
       <title>Google Maps via Store Locator Multiple Vulnerabilities</title>
@@ -775,6 +878,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="html5avmanager">
     <vulnerability>
       <title>HTML5 AV Manager 0.2.7 Arbitrary File Upload</title>
@@ -782,6 +886,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="foxypress">
     <vulnerability>
       <title>Foxypress 0.4.1.1 - 0.4.2.1 Arbitrary File Upload</title>
@@ -794,6 +899,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="asset-manager">
     <vulnerability>
       <title>Asset Manager 0.2 Arbitrary File Upload</title>
@@ -801,6 +907,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="track-that-stat">
     <vulnerability>
       <title>Track That Stat &lt;= 1.0.8 Cross Site Scripting</title>
@@ -808,6 +915,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-facethumb">
     <vulnerability>
       <title>WP-Facethumb Gallery &lt;= 0.1 Reflected Cross Site Scripting</title>
@@ -815,6 +923,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-survey-and-quiz-tool">
     <vulnerability>
       <title>Survey And Quiz Tool &lt;= 2.9.2 Cross Site Scripting</title>
@@ -822,6 +931,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-statistics">
     <vulnerability>
       <title>WP Statistics &lt;= 2.2.4 Cross Site Scripting</title>
@@ -829,6 +939,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-easy-gallery">
     <vulnerability>
       <title>WP Easy Gallery &lt;= 1.7 Cross Site Scripting</title>
@@ -836,6 +947,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="subscribe2">
     <vulnerability>
       <title>Subscribe2 &lt;= 8.0 Cross Site Scripting</title>
@@ -843,6 +955,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="soundcloud-is-gold">
     <vulnerability>
       <title>Soundcloud Is Gold &lt;= 2.1 Cross Site Scripting</title>
@@ -850,6 +963,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sharebar">
     <vulnerability>
       <title>Sharebar &lt;= 1.2.1 SQL Injection / Cross Site Scripting</title>
@@ -857,6 +971,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="share-and-follow">
     <vulnerability>
       <title>Share And Follow &lt;= 1.80.3 Cross Site Scripting</title>
@@ -864,6 +979,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sabre">
     <vulnerability>
       <title>SABRE &lt;= 1.2.0 Cross Site Scripting</title>
@@ -871,6 +987,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="pretty-link">
     <vulnerability>
       <title>Pretty Link Lite &lt;= 1.5.2 Cross Site Scripting</title>
@@ -878,6 +995,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="newsletter-manager">
     <vulnerability>
       <title>Newsletter Manager &lt;= 1.0 Cross Site Scripting</title>
@@ -885,6 +1003,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="network-publisher">
     <vulnerability>
       <title>Network Publisher &lt;= 5.0.1 Cross Site Scripting</title>
@@ -892,6 +1011,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="leaguemanager">
     <vulnerability>
       <title>LeagueManager &lt;= 3.7 Cross Site Scripting</title>
@@ -899,6 +1019,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="leaflet">
     <vulnerability>
       <title>Leaflet &lt;= 0.0.1 Cross Site Scripting</title>
@@ -906,6 +1027,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="joliprint">
     <vulnerability>
       <title>PDF And Print Button Joliprint &lt;= 1.3.0 Cross Site Scripting</title>
@@ -913,6 +1035,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="iframe-admin-pages">
     <vulnerability>
       <title>IFrame Admin Pages &lt;= 0.1 Cross Site Scripting</title>
@@ -920,6 +1043,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ezpz-one-click-backup">
     <vulnerability>
       <title>EZPZ One Click Backup &lt;= 12.03.10 Cross Site Scripting</title>
@@ -927,6 +1051,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="dynamic-widgets">
     <vulnerability>
       <title>Dynamic Widgets &lt;= 1.5.1 Cross Site Scripting</title>
@@ -934,6 +1059,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="download-monitor">
     <vulnerability>
       <title>Download Monitor &lt;= 3.3.5.7 Cross Site Scripting</title>
@@ -946,6 +1072,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="download-manager">
     <vulnerability>
       <title>Download Manager &lt;= 2.2 Cross Site Scripting</title>
@@ -953,6 +1080,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="codestyling-localization">
     <vulnerability>
       <title>Code Styling Localization &lt;= 1.99.16 Cross Site Scripting</title>
@@ -960,6 +1088,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="catablog">
     <vulnerability>
       <title>Catablog &lt;= 1.6 Cross Site Scripting</title>
@@ -967,6 +1096,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="bad-behavior">
     <vulnerability>
       <title>Bad Behavior &lt;= 2.24 Cross Site Scripting</title>
@@ -974,6 +1104,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="bulletproof-security">
     <vulnerability>
       <title>BulletProof Security &lt;= 0.47 Cross Site Scripting</title>
@@ -981,6 +1112,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="better-wp-security">
     <vulnerability>
       <title>Better WP Security v3.4.3</title>
@@ -993,6 +1125,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="custom-contact-forms">
     <vulnerability>
       <title>Custom Contact Forms &lt;= 5.0.0.1 Cross Site Scripting</title>
@@ -1000,6 +1133,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="2-click-socialmedia-button">
     <vulnerability>
       <title>2-Click-Socialmedia-Buttons &lt;= 0.34 Cross Site Scripting</title>
@@ -1012,6 +1146,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="login-with-ajax">
     <vulnerability>
       <title>Login With Ajax plugin &lt; 3.0.4.1 Cross Site Scripting</title>
@@ -1019,6 +1154,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="media-library-categories">
     <vulnerability>
       <title>Media Library Categories plugin &lt;= 1.0.6 SQL Injection Vulnerability</title>
@@ -1031,6 +1167,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="deans-fckeditor-with-pwwangs-code-plugin-for-wordpress">
     <vulnerability>
       <title>FCKeditor Deans With Pwwangs Code &lt;= 1.0.0 Remote Shell Upload</title>
@@ -1038,6 +1175,7 @@ File Upload Vulnerability</title>
       <type>RFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="zingiri-web-shop">
     <vulnerability>
       <title>Zingiri Web Shop &lt;= 2.4.0 Multiple XSS Vulnerabilities</title>
@@ -1055,6 +1193,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="organizer">
     <vulnerability>
       <title>Organizer 1.2.1 Cross Site Scripting / Path Disclosure</title>
@@ -1062,6 +1201,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="zingiri-tickets">
     <vulnerability>
       <title>Zingiri Tickets plugin File Disclosure</title>
@@ -1069,6 +1209,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="cms-tree-page-view">
     <vulnerability>
       <title>XSS vulnerability in CMS Tree Page View Plugin</title>
@@ -1076,6 +1217,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="all-in-one-event-calendar">
     <vulnerability>
       <title>Multiple XSS vulnerabilities in All-in-One Event Calendar for WordPress</title>
@@ -1083,6 +1225,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="buddypress">
     <vulnerability>
       <title>Buddypress &lt;= 1.5.5 SQL Injection</title>
@@ -1090,6 +1233,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="register-plus-redux">
     <vulnerability>
       <title>Register Plus Redux  &lt;= 3.8.3 Cross Site Scripting</title>
@@ -1097,6 +1241,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="magn-html5-drag-and-drop-media-uploader">
     <vulnerability>
       <title>Magn WP Drag and Drop &lt;= 1.1.4 Upload Shell Upload Vulnerability</title>
@@ -1104,6 +1249,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="kish-guest-posting">
     <vulnerability>
       <title>Kish Guest Posting 1.0 Arbitrary File Upload</title>
@@ -1111,6 +1257,7 @@ File Upload Vulnerability</title>
       <type>RFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="allwebmenus-wordpress-menu-plugin">
     <vulnerability>
       <title>AllWebMenus Shell Upload &lt;= 1.1.9 Shell Upload</title>
@@ -1125,6 +1272,7 @@ File Upload Vulnerability</title>
       <postdata>abspath=XXpathXX</postdata>
     </vulnerability>
   </plugin>
+
   <plugin name="shortcode-redirect">
     <vulnerability>
       <title>Shortcode Redirect &lt;= 1.0.01 Stored Cross Site Scripting</title>
@@ -1132,6 +1280,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ucan-post">
     <vulnerability>
       <title>uCan Post plugin &lt;= 1.0.09 Stored XSS</title>
@@ -1139,6 +1288,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-cycle-playlist">
     <vulnerability>
       <title>WP Cycle Playlist plugin Multiple Vulnerabilities</title>
@@ -1146,6 +1296,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="myeasybackup">
     <vulnerability>
       <title>myEASYbackup 1.0.8.1 Directory Traversal</title>
@@ -1153,6 +1304,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="count-per-day">
     <vulnerability>
       <title>Count Per Day 3.2.3 Cross Site Scripting</title>
@@ -1175,6 +1327,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-autoyoutube">
     <vulnerability>
       <title>WP-AutoYoutube plugin &lt;= 0.1 Blind SQL Injection Vulnerability</title>
@@ -1182,6 +1335,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="age-verification">
     <vulnerability>
       <title>Age Verification plugin &lt;= 0.4 Open Redirect</title>
@@ -1189,6 +1343,7 @@ File Upload Vulnerability</title>
       <type>REDIRECT</type>
     </vulnerability>
   </plugin>
+
   <plugin name="yousaytoo-auto-publishing-plugin">
     <vulnerability>
       <title>Yousaytoo Auto Publishing &lt;= 1.0 Cross Site Scripting</title>
@@ -1196,6 +1351,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="pay-with-tweet">
     <vulnerability>
       <title>Pay With Tweet plugin &lt;= 1.1 Multiple Vulnerabilities</title>
@@ -1203,6 +1359,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-whois">
     <vulnerability>
       <title>Whois Search &lt;= 1.4.2 Cross Site Scripting</title>
@@ -1210,6 +1367,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="upm-polls">
     <vulnerability>
       <title>BLIND SQL injection UPM-POLLS plugin 1.0.4</title>
@@ -1217,6 +1375,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="disqus-comment-system">
     <vulnerability>
       <title>Disqus Comment System &lt;= 2.68 Reflected Cross-Site Scripting (XSS)</title>
@@ -1224,6 +1383,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-recaptcha">
     <vulnerability>
       <title>Google reCAPTCHA &lt;= 3.1.3 Reflected XSS Vulnerability </title>
@@ -1231,6 +1391,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="link-library">
     <vulnerability>
       <title>Link Library plugin &lt;= 5.2.1 SQL Injection</title>
@@ -1238,6 +1399,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="cevhershare">
     <vulnerability>
       <title>CevherShare 2.0 plugin SQL Injection Vulnerability</title>
@@ -1245,6 +1407,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-glossary">
     <vulnerability>
       <title>WP Glossary plugin SQL Injection Vulnerability</title>
@@ -1252,6 +1415,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="meenews">
     <vulnerability>
       <title>meenews 5.1 plugin Cross-Site Scripting Vulnerabilities</title>
@@ -1259,6 +1423,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="clickdesk-live-support-chat">
     <vulnerability>
       <title>Click Desk Live Support Chat &lt; 2.0 Cross Site Scripting Vulnerability</title>
@@ -1266,6 +1431,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="adminimize">
     <vulnerability>
       <title>adminimize 1.7.21 Cross-Site Scripting Vulnerabilities</title>
@@ -1273,6 +1439,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="advanced-text-widget">
     <vulnerability>
       <title>Advanced Text Widget &lt;= 2.0.0 Cross Site Scripting Vulnerability</title>
@@ -1280,6 +1447,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mm-duplicate">
     <vulnerability>
       <title>MM Duplicate plugin &lt;= 1.2 SQL Injection Vulnerability</title>
@@ -1287,6 +1455,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ungallery">
     <vulnerability>
       <title>UnGallery plugin &lt;= 1.5.8 Local File Disclosure Vulnerability</title>
@@ -1294,6 +1463,7 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-menu-creator">
     <vulnerability>
       <title>Menu Creator plugin &lt;= 1.1.7 SQL Injection Vulnerability</title>
@@ -1301,6 +1471,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="allow-php-in-posts-and-pages">
     <vulnerability>
       <title>Allow PHP in Posts and Pages plugin &lt;= 2.0.0.RC1 SQL Injection Vulnerability</title>
@@ -1308,6 +1479,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="global-content-blocks">
     <vulnerability>
       <title>Global Content Blocks plugin &lt;= 1.2 SQL Injection Vulnerability</title>
@@ -1315,6 +1487,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ajaxgallery">
     <vulnerability>
       <title>Ajax Gallery plugin &lt;= 3.0 SQL Injection Vulnerability</title>
@@ -1322,6 +1495,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-ds-faq">
     <vulnerability>
       <title>WP DS FAQ plugin &lt;= 1.3.2 SQL Injection Vulnerability</title>
@@ -1329,6 +1503,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="odihost-newsletter-plugin">
     <vulnerability>
       <title>OdiHost Newsletter plugin &lt;= 1.0 SQL Injection Vulnerability</title>
@@ -1336,6 +1511,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="easy-contact-form-lite">
     <vulnerability>
       <title>Easy Contact Form Lite plugin &lt;= 1.0.7 SQL Injection Vulnerability</title>
@@ -1343,6 +1519,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-symposium">
     <vulnerability>
       <title>WP Symposium plugin &lt;= 0.64 SQL Injection Vulnerability</title>
@@ -1350,6 +1527,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="contus-hd-flv-player">
     <vulnerability>
       <title>Contus HD FLV Player plugin &lt;= 1.3 SQL Injection Vulnerability</title>
@@ -1357,6 +1535,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="file-groups">
     <vulnerability>
       <title>File Groups plugin &lt;= 1.1.2 SQL Injection Vulnerability</title>
@@ -1364,6 +1543,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ip-logger">
     <vulnerability>
       <title>IP-Logger plugin &lt;= 3.0 SQL Injection Vulnerability</title>
@@ -1371,6 +1551,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="beer-recipes">
     <vulnerability>
       <title>Beer Recipes v.1.0 XSS</title>
@@ -1378,6 +1559,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="is-human">
     <vulnerability>
       <title>Is-human &lt;=1.4.2 Remote Command Execution Vulnerability</title>
@@ -1385,6 +1567,7 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
+
   <plugin name="editormonkey">
     <vulnerability>
       <title>EditorMonkey plugin (FCKeditor) Arbitrary File Upload</title>
@@ -1392,6 +1575,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sermon-browser">
     <vulnerability>
       <title>SermonBrowser 0.43 SQL Injection</title>
@@ -1399,6 +1583,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ajax-category-dropdown">
     <vulnerability>
       <title>Ajax Category Dropdown 0.1.5 Multiple Vulnerabilities</title>
@@ -1406,6 +1591,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-custom-pages">
     <vulnerability>
       <title>WP Custom Pages 0.5.0.1 LFI Vulnerability</title>
@@ -1413,6 +1599,7 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="flash-album-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -1440,6 +1627,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="php_speedy_wp">
     <vulnerability>
       <title>PHP Speedy &lt;= 0.5.2 (admin_container.php) Remote Code Exec Exploit</title>
@@ -1447,6 +1635,7 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
+
   <plugin name="old-post-spinner">
     <vulnerability>
       <title>OPS Old Post Spinner 2.2.1 LFI Vulnerability</title>
@@ -1454,6 +1643,7 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="jquery-mega-menu">
     <vulnerability>
       <title>jQuery Mega Menu 1.0 Local File Inclusion</title>
@@ -1461,6 +1651,7 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="iwant-one-ihave-one">
     <vulnerability>
       <title>IWantOneButton 3.0.1 Multiple Vulnerabilities</title>
@@ -1468,6 +1659,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="forum-server">
     <vulnerability>
       <title>WP Forum Server 1.6.5 SQL Injection Vulnerability</title>
@@ -1485,6 +1677,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="relevanssi">
     <vulnerability>
       <title>Relevanssi 2.7.2 Stored XSS Vulnerability</title>
@@ -1492,6 +1685,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="gigpress">
     <vulnerability>
       <title>GigPress 2.1.10 Stored XSS Vulnerability</title>
@@ -1499,6 +1693,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="comment-rating">
     <vulnerability>
       <title>Comment Rating 2.9.23 Multiple Vulnerabilities</title>
@@ -1506,6 +1701,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="z-vote">
     <vulnerability>
       <title>Z-Vote 1.1 SQL Injection Vulnerability</title>
@@ -1513,6 +1709,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="user-photo">
     <vulnerability>
       <title>User Photo Component Remote File Upload Vulnerability</title>
@@ -1520,6 +1717,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="enable-media-replace">
     <vulnerability>
       <title>Enable Media Replace Multiple Vulnerabilities</title>
@@ -1527,6 +1725,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mingle-forum">
     <vulnerability>
       <title>Mingle Forum &lt;= 1.0.32.1 Cross Site Scripting / SQL Injection</title>
@@ -1549,6 +1748,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="accept-signups">
     <vulnerability>
       <title>Accept Signups 0.1 XSS</title>
@@ -1556,6 +1756,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="events-manager-extended">
     <vulnerability>
       <title>Events Manager Extended Persistent XSS Vulnerability</title>
@@ -1563,6 +1764,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="nextgen-smooth-gallery">
     <vulnerability>
       <title>NextGEN Smooth Gallery Blind SQL Injection Vulnerability</title>
@@ -1570,6 +1772,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mylinksdump">
     <vulnerability>
       <title>myLDlinker SQL Injection Vulnerability</title>
@@ -1577,6 +1780,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="firestats">
     <vulnerability>
       <title>Firestats Remote Configuration File Download</title>
@@ -1584,6 +1788,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="simple-press">
     <vulnerability>
       <title>Simple:Press SQL Injection Vulnerability</title>
@@ -1591,6 +1796,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="cimy-counter">
     <vulnerability>
       <title>Vulnerabilities in Cimy Counter for WordPress</title>
@@ -1598,6 +1804,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="nextgen-gallery">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -1610,6 +1817,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="cpl">
     <vulnerability>
       <title>Copperleaf Photolog SQL injection</title>
@@ -1617,6 +1825,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="events-calendar">
     <vulnerability>
       <title>Events SQL Injection Vulnerability</title>
@@ -1624,6 +1833,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="ImageManager">
     <vulnerability>
       <title>Image Manager Plugins Shell Upload Vulnerability</title>
@@ -1631,6 +1841,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-cumulus">
     <vulnerability>
       <title>Vulnerabilities in WP-Cumulus &lt;= 1.20 for WordPress</title>
@@ -1643,6 +1854,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-syntax">
     <vulnerability>
       <title>WP-Syntax &lt;= 0.9.1 Remote Command Execution</title>
@@ -1650,6 +1862,7 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
+
   <plugin name="my-category-order">
     <vulnerability>
       <title>My Category Order &lt;= 2.8 SQL Injection Vulnerability</title>
@@ -1657,6 +1870,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="related-sites">
     <vulnerability>
       <title>Related Sites 2.1 Blind SQL Injection Vulnerability</title>
@@ -1664,6 +1878,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="dm-albums">
     <vulnerability>
       <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
@@ -1682,6 +1897,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/dm-albums/template/album.php?SECURITY_FILE=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="photoracer">
     <vulnerability>
       <title>Photoracer 1.0 (id) SQL Injection Vulnerability</title>
@@ -1699,6 +1915,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-lytebox">
     <vulnerability>
       <title>Lytebox (wp-lytebox) Local File Inclusion Vulnerability</title>
@@ -1706,6 +1923,7 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="fmoblog">
     <vulnerability>
       <title>fMoblog 2.1 (id) SQL Injection Vulnerability</title>
@@ -1713,6 +1931,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="page-flip-image-gallery">
     <vulnerability>
       <title>Page Flip Image Gallery &lt;= 0.2.2 Remote FD Vuln</title>
@@ -1720,6 +1939,7 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-shopping-cart">
     <vulnerability>
       <title>e-Commerce &lt;= 3.4 Arbitrary File Upload Exploit</title>
@@ -1727,6 +1947,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="downloads-manager">
     <vulnerability>
       <title>Download Manager 0.2 Arbitrary File Upload Exploit</title>
@@ -1734,6 +1955,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wpSS">
     <vulnerability>
       <title>Spreadsheet &lt;= 0.6 SQL Injection Vulnerability</title>
@@ -1741,6 +1963,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-download">
     <vulnerability>
       <title>Download (dl_id) SQL Injection Vulnerability</title>
@@ -1748,6 +1971,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sniplets">
     <vulnerability>
       <title>Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities</title>
@@ -1755,6 +1979,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-photo-album">
     <vulnerability>
       <title>Photo album Remote SQL Injection Vulnerability</title>
@@ -1762,6 +1987,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sf-forum">
     <vulnerability>
       <title>Simple Forum 2.0-2.1 SQL Injection Vulnerability</title>
@@ -1774,6 +2000,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="st_newsletter">
     <vulnerability>
       <title>st_newsletter Remote SQL Injection Vulnerability</title>
@@ -1786,6 +2013,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wordspew">
     <vulnerability>
       <title>Wordspew Remote SQL Injection Vulnerability</title>
@@ -1793,6 +2021,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="dmsguestbook">
     <vulnerability>
       <title>dmsguestbook 1.7.0 Multiple Remote Vulnerabilities</title>
@@ -1800,6 +2029,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wassup">
     <vulnerability>
       <title>WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit</title>
@@ -1807,6 +2037,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-adserve">
     <vulnerability>
       <title>Adserve 0.2 adclick.php SQL Injection Exploit</title>
@@ -1814,6 +2045,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="fgallery">
     <vulnerability>
       <title>plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability</title>
@@ -1821,6 +2053,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-cal">
     <vulnerability>
       <title>WP-Cal 0.3 editevent.php SQL Injection Vulnerability</title>
@@ -1828,6 +2061,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wpforum">
     <vulnerability>
       <title>plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability</title>
@@ -1840,6 +2074,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-filemanager">
     <vulnerability>
       <title>Wp-FileManager 1.2 Remote Upload Vulnerability</title>
@@ -1847,6 +2082,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="pictpress">
     <vulnerability>
       <title>PictPress &lt;= 0.91 Remote File Disclosure Vulnerability</title>
@@ -1854,6 +2090,7 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="backupwordpress">
     <vulnerability>
       <title>BackUp&lt;= 0.4.2b RFI Vulnerability</title>
@@ -1862,6 +2099,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/BackUp/Archive.php?bkpwp_plugin_path=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="myflash">
     <vulnerability>
       <title>plugin myflash &lt;= 1.00 (wppath) RFI Vulnerability</title>
@@ -1870,6 +2108,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/myflash/myflash-button.php?wpPATH=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="wordtube">
     <vulnerability>
       <title>plugin wordTube &lt;= 1.43 (wpPATH) RFI Vulnerability</title>
@@ -1878,6 +2117,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/wordtube/wordtube-button.php?wpPATH=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-table">
     <vulnerability>
       <title>plugin wp-Table &lt;= 1.43 (inc_dir) RFI Vulnerability</title>
@@ -1886,6 +2126,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/wp-table/js/wptable-button.phpp?wpPATH=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="mygallery">
     <vulnerability>
       <title>myGallery &lt;= 1.4b4 Remote File Inclusion Vulnerability</title>
@@ -1894,6 +2135,7 @@ File Upload Vulnerability</title>
       <uri>/mygallery/myfunctions/mygallerybrowser.php?myPath=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="sendit">
     <vulnerability>
       <title>SendIt plugin &lt;= 1.5.9 Blind SQL Injection Vulnerability</title>
@@ -1901,6 +2143,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="js-appointment">
     <vulnerability>
       <title>Js-appointment plugin &lt;= 1.5 SQL Injection Vulnerability</title>
@@ -1908,6 +2151,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mm-forms-community">
     <vulnerability>
       <title>MM Forms Community &lt;= 1.2.3 SQL Injection Vulnerability</title>
@@ -1920,6 +2164,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="super-captcha">
     <vulnerability>
       <title>Super CAPTCHA plugin &lt;= 2.2.4 SQL Injection Vulnerability</title>
@@ -1927,6 +2172,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="collision-testimonials">
     <vulnerability>
       <title>Collision Testimonials plugin &lt;= 3.0 SQL Injection Vulnerability</title>
@@ -1934,6 +2180,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="oqey-headers">
     <vulnerability>
       <title>Oqey Headers plugin &lt;= 0.3 SQL Injection Vulnerability</title>
@@ -1941,6 +2188,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="fbpromotions">
     <vulnerability>
       <title>Facebook Promotions plugin &lt;= 1.3.3 SQL Injection Vulnerability</title>
@@ -1948,6 +2196,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="evarisk">
     <vulnerability>
       <title>Evarisk plugin &lt;= 5.1.3.6 SQL Injection Vulnerability</title>
@@ -1960,6 +2209,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="profiles">
     <vulnerability>
       <title>Profiles plugin &lt;= 2.0 RC1 SQL Injection Vulnerability</title>
@@ -1967,6 +2217,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mystat">
     <vulnerability>
       <title>mySTAT plugin &lt;= 2.6 SQL Injection Vulnerability</title>
@@ -1974,6 +2225,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="sh-slideshow">
     <vulnerability>
       <title>SH Slideshow plugin &lt;= 3.1.4 SQL Injection Vulnerability</title>
@@ -1981,6 +2233,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="copyright-licensing-tools">
     <vulnerability>
       <title>iCopyright(R) Article Tools plugin &lt;= 1.1.4 SQL Injection Vulnerability</title>
@@ -1988,6 +2241,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="advertizer">
     <vulnerability>
       <title>Advertizer plugin &lt;= 1.0 SQL Injection Vulnerability</title>
@@ -1995,6 +2249,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="event-registration">
     <vulnerability>
       <title>Event Registration plugin &lt;= 5.44 SQL Injection Vulnerability</title>
@@ -2012,6 +2267,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="crawlrate-tracker">
     <vulnerability>
       <title>Craw Rate Tracker plugin &lt;= 2.0.2 SQL Injection Vulnerability</title>
@@ -2019,6 +2275,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-audio-gallery-playlist">
     <vulnerability>
       <title>wp audio gallery playlist plugin &lt;= 0.12 SQL Injection Vulnerability</title>
@@ -2026,6 +2283,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="yolink-search">
     <vulnerability>
       <title>yolink Search plugin &lt;= 1.1.4 SQL Injection Vulnerability</title>
@@ -2033,6 +2291,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="pure-html">
     <vulnerability>
       <title>PureHTML plugin &lt;= 1.0.0 SQL Injection Vulnerability</title>
@@ -2040,6 +2299,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="couponer">
     <vulnerability>
       <title>Couponer plugin &lt;= 1.2 SQL Injection Vulnerability</title>
@@ -2047,6 +2307,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="grapefile">
     <vulnerability>
       <title>grapefile plugin &lt;= 1.1 Arbitrary File Upload</title>
@@ -2054,6 +2315,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="image-gallery-with-slideshow">
     <vulnerability>
       <title>image-gallery-with-slideshow plugin &lt;= 1.5 Arbitrary File Upload / SQL Injection</title>
@@ -2061,6 +2323,7 @@ File Upload Vulnerability</title>
       <type>MULTI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wordpress-donation-plugin-with-goals-and-paypal-ipn-by-nonprofitcmsorg">
     <vulnerability>
       <title>Donation plugin &lt;= 1.0 SQL Injection Vulnerability</title>
@@ -2068,6 +2331,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-bannerize">
     <vulnerability>
       <title>WP Bannerize plugin &lt;= 2.8.6 SQL Injection Vulnerability</title>
@@ -2080,6 +2344,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="search-autocomplete">
     <vulnerability>
       <title>SearchAutocomplete plugin &lt;= 1.0.8 SQL Injection Vulnerability</title>
@@ -2087,6 +2352,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="videowhisper-video-presentation">
     <vulnerability>
       <title>VideoWhisper Video Presentation plugin &lt;= 1.1 SQL Injection Vulnerability</title>
@@ -2094,6 +2360,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="facebook-opengraph-meta-plugin">
     <vulnerability>
       <title>Facebook Opengraph Meta plugin &lt;= 1.0 SQL Injection Vulnerability</title>
@@ -2101,6 +2368,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="zotpress">
     <vulnerability>
       <title>Zotpress plugin &lt;= 4.4 SQL Injection Vulnerability</title>
@@ -2108,6 +2376,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="oqey-gallery">
     <vulnerability>
       <title>oQey Gallery plugin &lt;= 0.4.8 SQL Injection Vulnerability</title>
@@ -2115,6 +2384,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="tweet-old-post">
     <vulnerability>
       <title>Tweet Old Post plugin &lt;= 3.2.5 SQL Injection Vulnerability</title>
@@ -2122,6 +2392,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="post-highlights">
     <vulnerability>
       <title>post highlights plugin &lt;= 2.2 SQL Injection Vulnerability</title>
@@ -2129,6 +2400,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="knr-author-list-widget">
     <vulnerability>
       <title>KNR Author List Widget plugin &lt;= 2.0.0 SQL Injection Vulnerability</title>
@@ -2136,6 +2408,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="scormcloud">
     <vulnerability>
       <title>SCORM Cloud plugin &lt;= 1.0.6.6 SQL Injection Vulnerability</title>
@@ -2143,6 +2416,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="eventify">
     <vulnerability>
       <title>Eventify - Simple Events plugin &lt;= 1.7.f SQL Injection Vulnerability</title>
@@ -2150,6 +2424,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="paid-downloads">
     <vulnerability>
       <title>Paid Downloads plugin &lt;= 2.01 SQL Injection Vulnerability</title>
@@ -2157,6 +2432,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="community-events">
     <vulnerability>
       <title>Community Events plugin &lt;= 1.2.1 SQL Injection Vulnerability</title>
@@ -2164,6 +2440,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="1-flash-gallery">
     <vulnerability>
       <title>1 Flash Gallery Arbiraty File Upload Exploit (MSF)</title>
@@ -2171,6 +2448,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-filebase">
     <vulnerability>
       <title>WP-Filebase Download Manager plugin &lt;= 0.2.9 SQL Injection Vulnerability</title>
@@ -2178,6 +2456,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="a-to-z-category-listing">
     <vulnerability>
       <title>A to Z Category Listing plugin &lt;= 1.3 SQL Injection Vulnerability</title>
@@ -2185,6 +2464,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-e-commerce">
     <vulnerability>
       <title>WP e-Commerce plugin &lt;= 3.8.6 SQL Injection Vulnerability</title>
@@ -2192,6 +2472,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="filedownload">
     <vulnerability>
       <title>Filedownload 0.1 (download.php) Remote File Disclosure Vulnerability</title>
@@ -2199,6 +2480,7 @@ File Upload Vulnerability</title>
       <type>LFI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="thecartpress">
     <vulnerability>
       <title>TheCartPress &lt;= 1.6 Cross Site Sripting</title>
@@ -2212,6 +2494,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/thecartpress/checkout/CheckoutEditor.php?tcp_save_fields=true&amp;tcp_class_name=asdf&amp;tcp_class_path=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="wpeasystats">
     <vulnerability>
       <title>WPEasyStats 1.8 Remote File Inclusion</title>
@@ -2220,6 +2503,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/wpeasystats/export.php?homep=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="annonces">
     <vulnerability>
       <title>Annonces 1.2.0.0 Remote File Inclusion</title>
@@ -2228,6 +2512,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/annonces/includes/lib/photo/uploadPhoto.php?abspath=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="livesig">
     <vulnerability>
       <title>Livesig 0.4 Remote File Inclusion</title>
@@ -2237,6 +2522,7 @@ File Upload Vulnerability</title>
       <postdata>wp-root=XXpathXX&amp;action=asdf</postdata>
     </vulnerability>
   </plugin>
+
   <plugin name="disclosure-policy-plugin">
     <vulnerability>
       <title>Disclosure Policy 1.0 Remote File Inclusion</title>
@@ -2245,6 +2531,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/disclosure-policy-plugin/functions/action.php?delete=asdf&amp;blogUrl=asdf&amp;abspath=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="mailz">
     <vulnerability>
       <title>Mailing List 1.3.2 Remote File Inclusion</title>
@@ -2258,6 +2545,7 @@ File Upload Vulnerability</title>
       <type>UNKNOWN</type>
     </vulnerability>
   </plugin>
+
   <plugin name="g-web-shop">
     <vulnerability>
       <title>Zingiri Web Shop 2.2.0 Remote File Inclusion</title>
@@ -2271,6 +2559,7 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
+
   <plugin name="mini-mail-dashboard-widget">
     <vulnerability>
       <title>Mini Mail Dashboard Widget 1.36 Remote File Inclusion</title>
@@ -2283,6 +2572,7 @@ File Upload Vulnerability</title>
       <type>XSS</type>
     </vulnerability>
   </plugin>
+
   <plugin name="relocate-upload">
     <vulnerability>
       <title>Relocate Upload 0.14 Remote File Inclusion</title>
@@ -2291,6 +2581,7 @@ File Upload Vulnerability</title>
       <uri>/wp-content/plugins/relocate-upload/relocate-upload.php?ru_folder=asdf&amp;abspath=XXpathXX</uri>
     </vulnerability>
   </plugin>
+
   <plugin name="category-grid-view-gallery">
     <vulnerability>
       <title>Category Grid View Gallery plugin 0.1.1 Shell Upload vulnerability</title>
@@ -2298,6 +2589,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="auto-attachments">
     <vulnerability>
       <title>Auto Attachments plugin 0.2.9 Shell Upload vulnerability</title>
@@ -2305,6 +2597,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-marketplace">
     <vulnerability>
       <title>WP Marketplace plugin 1.1.0 Shell Upload vulnerability</title>
@@ -2312,6 +2605,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="dp-thumbnail">
     <vulnerability>
       <title>DP Thumbnail plugin 1.0 Shell Upload vulnerability</title>
@@ -2319,6 +2613,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="vk-gallery">
     <vulnerability>
       <title>Vk Gallery plugin 1.1.0 Shell Upload vulnerability</title>
@@ -2326,6 +2621,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="rekt-slideshow">
     <vulnerability>
       <title>Rekt Slideshow plugin 1.0.5 Shell Upload vulnerability</title>
@@ -2333,6 +2629,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="cac-featured-content">
     <vulnerability>
       <title>CAC Featured Content plugin 0.8 Shell Upload vulnerability</title>
@@ -2340,6 +2637,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="rent-a-car">
     <vulnerability>
       <title>Rent A Car plugin 1.0 Shell Upload vulnerability</title>
@@ -2347,6 +2645,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="lisl-last-image-slider">
     <vulnerability>
       <title>LISL Last Image Slider plugin 1.0 Shell Upload vulnerability</title>
@@ -2354,6 +2653,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="islidex">
     <vulnerability>
       <title>Islidex plugin 2.7 Shell Upload vulnerability</title>
@@ -2361,6 +2661,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="kino-gallery">
     <vulnerability>
       <title>Kino Gallery plugin 1.0 Shell Upload vulnerability</title>
@@ -2368,6 +2669,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="cms-pack-cache">
     <vulnerability>
       <title>Cms Pack plugin 1.3 Shell Upload vulnerability</title>
@@ -2375,6 +2677,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="a-gallery">
     <vulnerability>
       <title>A Gallery plugin 0.9 Shell Upload vulnerability</title>
@@ -2382,6 +2685,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="category-list-portfolio-page">
     <vulnerability>
       <title>Category List Portfolio Page plugin 0.9 Shell Upload vulnerability</title>
@@ -2389,6 +2693,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="really-easy-slider">
     <vulnerability>
       <title>Really Easy Slider plugin 0.1 Shell Upload vulnerability</title>
@@ -2396,6 +2701,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="verve-meta-boxes">
     <vulnerability>
       <title>Verve Meta Boxes plugin 1.2.8 Shell Upload vulnerability</title>
@@ -2403,6 +2709,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="user-avatar">
     <vulnerability>
       <title>User Avatar plugin 1.3.7 shell upload vulnerability</title>
@@ -2410,6 +2717,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="extend-wordpress">
     <vulnerability>
       <title>Extend plugin 1.3.7 Shell Upload vulnerability</title>
@@ -2417,6 +2725,7 @@ File Upload Vulnerability</title>
       <type>UPLOAD</type>
     </vulnerability>
   </plugin>
+
   <plugin name="adrotate">
     <vulnerability>
       <title>AdRotate plugin &lt;= 3.6.5 SQL Injection Vulnerability</title>
@@ -2429,6 +2738,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-spamfree">
     <vulnerability>
       <title>WP-SpamFree 3.2.1 Spam SQL Injection Vulnerability</title>
@@ -2436,6 +2746,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="gd-star-rating">
     <vulnerability>
       <title>GD Star Rating plugin &lt;= 1.9.10 SQL Injection</title>
@@ -2448,6 +2759,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="contact-form-wordpress">
     <vulnerability>
       <title>Contact Form plugin &lt;= 2.7.5 SQL Injection</title>
@@ -2455,6 +2767,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="wp-photo-album-plus">
     <vulnerability>
       <title>WP Photo Album Plus &lt;= 4.1.1 SQL Injection</title>
@@ -2462,6 +2775,7 @@ File Upload Vulnerability</title>
       <type>SQLI</type>
     </vulnerability>
   </plugin>
+
   <plugin name="backwpup">
     <vulnerability>
       <title>BackWPUp 2.1.4 Code Execution</title>
@@ -2474,6 +2788,7 @@ File Upload Vulnerability</title>
       <type>RCE</type>
     </vulnerability>
   </plugin>
+
   <plugin name="portable-phpmyadmin">
     <vulnerability>
       <title>portable-phpMyAdmin &lt; 1.3.1 Authentication Bypass</title>
@@ -2481,5 +2796,6 @@ File Upload Vulnerability</title>
       <type>AUTHBYPASS</type>
     </vulnerability>
   </plugin>
+
 </vulnerabilities>
 
diff --git a/data/wp_theme_vulns.xml b/data/wp_theme_vulns.xml
index 84f4f1c0..90c9f987 100644
--- a/data/wp_theme_vulns.xml
+++ b/data/wp_theme_vulns.xml
@@ -18,10 +18,24 @@ You should have received a copy of the GNU General Public License
 along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
   This file contains vulnerabilities associated with WordPress themes.
-  TYPE = ["SQLI", "MULTI", "REDIRECT", "RCE", "RFI", "LFI", "UPLOAD", "UNKNOWN", "XSS"]
+  TYPE = ["SQLI", "MULTI", "REDIRECT", "RCE", "RFI", "LFI", "UPLOAD", "UNKNOWN", "XSS", "FPD"]
 
 -->
 <themes>
+
+  <theme name="moneymasters">
+    <vulnerability>
+      <title>moneymasters Full Path Disclosure vulnerability</title>
+      <reference>http://1337day.com/exploit/20077</reference>
+      <type>FPD</type>
+    </vulnerability>
+    <vulnerability>
+      <title>moneymasters File Upload Vulnerability (metasploit)</title>
+      <reference>http://1337day.com/exploit/20076</reference>
+      <type>UPLOAD</type>
+    </vulnerability>
+  </theme>
+
   <theme name="ovum">
     <vulnerability>
         <title>XSS vulnerability in Imediapixel premium WordPress themes</title>