Im not sure if the information in this link is still true, but inblue tested it back in September 2017 http://wiki.biblepay.org/Multiple_Instances Id rather everyone know about it, than just a few
I updated this wiki document to explain the situation and that there is No exploit as of 2019.