> The firm that developed the application, Feed-b, commented that the vulnerability was a “one-off incident that was immediately dealt with"

Yeah... after a screw-up of that magnitude you don't even need a second vulnerability.