A researcher flagged the vulnerability 40 days ago with no response from Fiverr. Now tax returns, driver's licenses, and ...