Hahahhahahahha i am forced to post this .. just after my report 2 days back. today (just now ) he posted new version of his plugin I.E MySubscriptions 2.0.2.zip
i also received an reply mail for audit and some other stuff BUT I DONT CARE SHOWING IT TO YOU GUYS.
i audited his attachment plugin and the funny thing is he failed to fix it even after my report and tips. same sqli and lfi exist i replied him saying there is NO BUG [he posted v2.0.2 just now after i told him its safe]
i wonder what happens if he sees this thread i simply hate the attitude the guy got on the first day when he never bothered to reply my mail which clearly tells how careless he is towards his customers forum lol .he dont care if they get jacked
he is spoiling his own name. one days some bad guy finds it and starts mass defacing owners using his p;lugin and then he realises his mistakes and he says this in changelog Change Log 2.0.2 - Bug fix in the IPN handler of recurring PayPal subscriptions - more specifically end_of_time wouldn't work