# WordPress Count-per-Day Plugin (notes.php) - Remote Code Upload
# Risk: High
# Author: Hugo Santiago dos Santos
# Contact: hugo.s@linuxmail.org
# Date: 25/10/2014
# Vendor Homepage: https://wordpress.org/plugins/count-per-day/
# Tested on: Windows 7 and Gnu/Linux
# Google Dork: inurl:/wp-content/plugins/count-per-day/

# VUL: /count-per-day/notes.php

# PoC : 

http://www.sefiXXn.gob.hn/wp-content/plugins/count-per-day/notes.php

http://www.portalXXdosultapetes.com.br/site/wp-content/plugins/count-per-day/notes.php


# Xploit: Are vulnerable sites that have the notes.php file inside the dir /count-per-day/