You will not correct the problems that have been reported by @DevSoft?
1. Just checked, nothing happened. I got only errors. I think the bug has been already fixed.
2. How can I stole anybody session if recovery page works only wnen you not logged in?
3. Even if I will stole anybody data, what will I do with it? The payments are not instant here and to change BTC adress I need to contact admin.