Thanks for the post, really scary stuff. We just assume plugins can't have a security flaw, let alone a slider plugin!