Added plupload XSS issue to older versions of wp.