Unanswered Question List.
wpscan was showing some URLs so i entered one in my browser and one file was downloaded it was user invoice details. I didn't do anything wrong with data ad I haven't performed any attack to achieve that is it illegal?
I think the bug in the website occurred bcoz of misconfigurations and the page was publically available o the internet you didn't make any malicious request to a server then it's fine coz if you are accessing info that is publically available then it's legal. until and unless you are misusing that info.