It's extremely easy to exploit once it is known. The question is simply: Did people know about it and not disclose so they could keep exploiting it?