@wycks - You and Ryan both bring up good points. A plugin could be detected to have a bunch of flaws but if you can't do anything malicious with them, no big deal, right? Or if you can't prove that what the scanner is detecting is actually a flaw with a POC then it's borderline meaningless.