{"id":21125764,"url":"https://github.com/randomrobbiebf/ninja-forms-brute","last_synced_at":"2026-07-01T21:32:15.886Z","repository":{"id":85658771,"uuid":"481738133","full_name":"RandomRobbieBF/ninja-forms-brute","owner":"RandomRobbieBF","description":null,"archived":false,"fork":false,"pushed_at":"2022-04-14T20:20:11.000Z","size":8,"stargazers_count":0,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-10-25T08:44:57.732Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RandomRobbieBF.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-04-14T20:18:27.000Z","updated_at":"2022-04-14T20:19:08.000Z","dependencies_parsed_at":"2023-03-01T11:30:30.508Z","dependency_job_id":null,"html_url":"https://github.com/RandomRobbieBF/ninja-forms-brute","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/RandomRobbieBF/ninja-forms-brute","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Fninja-forms-brute","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Fninja-forms-brute/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Fninja-forms-brute/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Fninja-forms-brute/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RandomRobbieBF","download_url":"https://codeload.github.com/RandomRobbieBF/ninja-forms-brute/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2Fninja-forms-brute/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35024359,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-01T02:00:05.325Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-20T04:36:49.910Z","updated_at":"2026-07-01T21:32:15.861Z","avatar_url":"https://github.com/RandomRobbieBF.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Ninja Forms \u003c 3.6.8 - Unauthenticated Email Address Disclosure\n\nDescription\n---\nThe plugin does not delete the temporary files created when exporting submissions, which could allow unauthenticated attackers to download them and get sensitive information such as the email address of users who submitted a form given that the file is publicly accessible, and with a guessable name\nProof of Concept\nThe exported CSV (generated when exporting all submissions via the \"Download All Submissions\" button) are stored in the /wp-content/uploads/\u003cyear\u003e/\u003cmonth\u003e folder using the following format: form-\u003cid\u003e-all-subs.csv\n\nExample: https://example.com/wp-content/uploads/2022/03/form-1-all-subs.csv \n  \nHow to Run\n---\n```\npython3 ninja.py -u http://wordpress.lan\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frandomrobbiebf%2Fninja-forms-brute","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frandomrobbiebf%2Fninja-forms-brute","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frandomrobbiebf%2Fninja-forms-brute/lists"}