The private message can be hijacked if Masquerade is enabled and used for the user.
- Enable Masquerade with Private Messenger.
- Make sure a user has a private message.
- Masquerade as this user and you will see the private which isn't for you.
More user control for the private message OR excluding Masquerade from the view of Private Messenger.
Fixed
1.1
Code