I read that someone had tested Bentbox and found a way to access the boxes there from a logged in account. He reported that Bentbox had now fixed most of the identified security issues but I thought I would check here if anyone has any back doors that still are open? I tried the methods he identified and they do not work.