What makes this now-patched plugin hole especially dangerous is the lack of authentication needed for an attack, which can ...