A father who found the security flaw was initially blocked by Kids Pass on Twitter, but the issue is now fixed.