Update plugin_vulns.xml

add <vulnerability> tag