## https://sploitus.com/exploit?id=WPEX-ID:A281F63F-E295-4666-8A08-01B23CD5A744
1. In WordPress's Settings > Discussion page, add your IP address to the Disallowed Comment Keys field. This will block form submissions from your IP address.
2. Submit the form, and intercept the request. Add the header `X-Forwarded-For: 192.1.2.3` (you may change the IP address to any other address).
3. See that the form submission is not blocked.