Information Disclosure?

Obviously you can easily generate other user’s form submissions by simply manipulating the download links. By changing the &lid Parameter in the URL i was able to see all data previously submitted by me or other users.

https://wordpress.org/plugins/gravity-pdf-download-pdf-button/