Vulnerabilities in HeroPlugins software