The hacker was also awarded $60,000 at the first Pwnium contest in March of this year.
The plug-in walks users through the process of maximizing their privacy on Facebook and Google, as well as other sites.
The vulnerability could enable an attacker to view a user's browsing history.
Windows 8 is packed with new security features that should appeal to both end users and system administrators.
Still, infection rates for Windows XP are two to three times worse.
Microsoft releases seven bulletins addressing 20 security issues in Windows, SQL Server and Office.
RFI inclusion is a simple website attack that nonetheless can make sites vulnerable to data loss or other malice. Using careful code logic will thwart RFI attacks.
While Microsoft System Center 2012 Endpoint Protection offers deployment and management convenience, its anti-malware engine is weak in comparison to competitors.
The BSI is recommending that users switch to an alternative browser.