For anybody who missed OPs bit at the end: Responsible Disclosure Note -- 40 days have passed since this was notified to the designated vulnerability email (se

For anybody who missed OPs bit at the end: Responsible Disclosure Note -- 40 days have passed since this was notified to the designated vulnerability email (security@fiverr.com). The security team did not reply.