randomrobbiebf/ninja-forms-brute
The plugin does not delete the temporary files created when exporting submissions, which could allow unauthenticated attackers to download them and get sensitive information such as the email address of users who submitted a form given that the file is publicly accessible, and with a guessable name Proof of Concept The exported CSV (generated when exporting all submissions via the "Download All Submissions" button) are stored in the /wp-content/uploads// folder using the following format: form--all-subs.csv
Example: https://example.com/wp-content/uploads/2022/03/form-1-all-subs.csv
python3 ninja.py -u http://wordpress.lan