WordPress 99 Robots WP Background Takeover Advertisements 4.1.4 is susceptible to local file inclusion via exports/download.php.
View the template here CVE-2018-9118.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-9118.yaml
References: