Made a copy of twentytwelve theme in order to add some vulnerabilities.
Enabled theme twentytwelve.5.
Introduced a persistent XSS in the theme.
Enable error display.
Added wp-private-message vulnerable pluguin.
Updated template database with support for a new vulnerable plugin and the ability to register users.
Changed hostname to acme-blog.local.
Simplified vagrant file with hostname.
Added sendmail puppet module.
Simplified vagrant file.
Re-updated puppet dependencies.
Added manual instalation of sendmail.
The puppet scheme is not working so it was replaced.