[Aldo_MX]

The title should be changed to something like "Latin America's Stripe competitor didn't validate access tokens", almost nobody from outside LATAM will ever know what Mercado Pago is, neither why the discussion of this vulnerability matters.

[the_af]

It's not a bad suggestion, but I'd keep Mercado Pago in the title as well. Mercado Libre/Pago is huge here in Latin America, and I wouldn't have read this post otherwise.

[etagwerker]

I've updated the post title with your suggestions. Thanks!