In reply to ThemeFusion.

I removed the link to their detailed report of the vulnerabilities and linked to yours instead. The fact that they discovered the security issues is part of this story and we have included a general link to their website.