WordPress WP-DreamworkGallery CSRF / Shell Upload - IT_Se{cury}ty - Delvin's World

Dork : 

filetype:xml inurl:/wp-content/plugins/wp-dreamworkgallery

Exploit : 

/wp-content/plugins/wp-dreamworkgallery/js/swfupload/js/upload.php