The vulnerable version of the app, which has 100 million users, uses easily predictable URLs to link to private content.
Source: Threadpost