## https://sploitus.com/exploit?id=WPEX-ID:0F7757C9-69FA-49DB-90B0-40F0FF29BEE7
Setup a listener on a localhost/LAN host (such as nc -l 127.0.0.1 9000), then as a contributor, put the following shortcode in a post and save its draft: [blogcard url="http://127.0.0.1:9000"]
Notice that the internal server (localhost:9000) received the request when the draft was saved