rapid7/metasploit-framework — pull request #1224 by CharlieEriksen (2013-01-01 23:44:54+00:00)
Title: Added exploit wp_advanced_customs_fields_exec.rb

Adding an exploit for a RFI in the Advanced Custom Fields plugin for Wordpress.

The vulnerable versions are 3.5.1 and below. They can be found here:
http://wordpress.org/extend/plugins/advanced-custom-fields/developers/

This will only work when the server has url include enabled.