Unauthenticated payment receipt disclosure via weak transaction hashes

Authorization bypass in WPManageNinja Fluent Forms 6.2.8 and earlier allows remote attackers to read other customers' payment receipts. The payment receipt handler accepts the user-controlled transaction parameter as a lookup key without binding the returned transaction to an authorized requester, while its hash derives from observable or guessable submission ID, form ID, and creation time. No account is required; roughly 900 candidates per second for each submission-and-form pair can reveal names, email and billing addresses, order items, payment methods, and payment status.