WordPress Welcome Announcement plugin version 1.0.5 suffers from a cross site scripting vulnerability. Continue reading...