plugin vulnerability | The Financial Standard