WordPress GraceMedia Media Player plugin 1.0 is susceptible to local file inclusion via the cfg parameter.
View the template here CVE-2019-9618.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-9618.yaml
References: