Oh, the stupidity

[MattR]

I wouldn't just post a list, I don't think a public list of vulnerabilities that people could to use to hack forums with is the best way of doing it. Contacting the author and letting them decide whether they want to listen would probably suffice and wouldn't take any more time than just posting here. They can fix it, learn from it or w/e, but there's not a list of them, which would ultimately cause a lot of problems for us.