@sucurilabs @site5 I've put Site5 in touch with the hacker, who has been incredibly helpful in showing where the vulnerabilities are. :)