Update plugin_vulns.xml

Adding the full path disclosure in "aryo-activity-log" plugin; it was fixed 3 days ago.