In reply to Omar Santos.

Glad to see it's just the web plugin that is vulnerable. I still haven't found anything that is hitting 1.6 update 36 or 37. Ideally, people should just stop clicking through things that they didn't ask for. We both know that will never happen.