A popular prayer app connected to the Vatican, “Click to Pray,” has been leaving user information exposed for months, the most recent in a years-long string of vulnerabilities and hacks for Vatican-related websites.
The app, which is available on both iOS and Android, suffers from an insecure direct object reference (I…