Share
## https://sploitus.com/exploit?id=WPEX-ID:FB9DBCDF-4FFD-484D-9B67-283683D050FD
PoC: https://example.com/wp-admin/admin.php?page=zoooom_settings&tab=whatever

This URL shows include_once error, which indicates that the parameter is not sanitized.