NordVPN quietly plugged vuln where an HTTP POST request without authentication would return detailed customer data

A vulnerability in NordVPN's payments platform allowed anyone to view users' payment information and email addresses, a startling HackerOne entry has revealed.