Description
该漏洞存在于 Wordpress Ninja Tables 插件中，攻击者可以通过发送特制的请求，利用插件的文件读取功能，读取服务器上的任意文件，可能导致敏感信息泄露。
WordPress Ninja Tables Plugin /wp-admin/admin-ajax.php url 文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://xbow.com/blog/xbow-ninja-tables
https://github.com/runZeroInc/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-ninja-tables-lfi.yaml
https://wpscan.com/plugin/ninja-tables/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ninja-tables
https://patchstack.com/database/wordpress/plugin/ninja-tables/vulnerabilities