Plugin Name : wp-picasa-image
Effected Version : 1.0 (and most probably lower version's if any)
Minimum Level of Access Required : Unauthenticated
PoC - (Proof of Concept) :
Vulnerable Parameter : post_id
Vendor Contacted : 2014-01-17
You just need to copy the address of the pictures from Picasa album, then this plugin will help you modify the address to show in you posts. If the address of picture is not from Picasa, it won't do anything. The plugin has been embeded into backstage editor, so you don't need to modify the theme files. If you found any problem, please let me know.