https://github.com/randomrobbiebf/ninja-forms-brute

https://github.com/randomrobbiebf/ninja-forms-brute

Last synced: 22 days ago
JSON representation

• Host: GitHub
• URL: https://github.com/randomrobbiebf/ninja-forms-brute
• Owner: RandomRobbieBF
• License: apache-2.0
• Created: 2022-04-14T20:18:27.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2022-04-14T20:20:11.000Z (over 4 years ago)
• Last Synced: 2025-10-25T08:44:57.732Z (9 months ago)
• Language: Python
• Size: 7.81 KB
• Stars: 0
• Watchers: 1
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Ninja Forms < 3.6.8 - Unauthenticated Email Address Disclosure

Description

---

The plugin does not delete the temporary files created when exporting submissions, which could allow unauthenticated attackers to download them and get sensitive information such as the email address of users who submitted a form given that the file is publicly accessible, and with a guessable name

Proof of Concept

The exported CSV (generated when exporting all submissions via the "Download All Submissions" button) are stored in the /wp-content/uploads// folder using the following format: form--all-subs.csv

Example: https://example.com/wp-content/uploads/2022/03/form-1-all-subs.csv 

  

How to Run

---

```

python3 ninja.py -u http://wordpress.lan

```