Wow guys. Any administration, developer, etc. worth a grain of salt will not give out (even potential) security vulnerabilities to harm their members. For those who are
curious, you can find out by looking at the patch once it comes out or try finding it yourself prior.
There is no reason you need to know what the vulnerability is until it's been fixed. If you're concerned, disable the product. Simple.
Ugh, I feel for the staff here. Dealing with other admins or developers is the worst when they think they always know best.
Keep up the good work guys. The response you SHOULD be getting is a huge thanks for looking out for us.
Cheers