Merged plugin vuln