Three kiddies came onto my server and took admin privs and caused havok. They gave me method and injection. I have the file but I don't want to post it because it's super simple to do. A dev or a mod please pm or give me an outlet to give the file without outting it to the wider community.

We have an email to report security issues at [email protected].

Merged post

The method you reported was tested and found to not cause anything, so unless one of those plugins is handling something oddly, there shouldn't be any issues from this and the user would have to have obtained admin another way.