No Need to Hack When It’s Leaking: Click to Pray edition

The Click To Pray mobile and web app, the official app of the Pope’s Worldwide Prayer Network with roughly 719,517 accounts, has been exposing users' names and email addresses for months; an ethical hacker reported the issue on January 3 but says the vulnerability remained unaddressed. This is a persistent PII exposure affecting a large user base and enabling potential phishing or privacy harm.