Why all but our super cheap 'favour' sites hosted on consumer grade hosts don't allow PHP to update PHP. This is so potentially dangerous.
Syed Balkhi (Awesome Motive) put a backdoor in WPForms Lite three weeks ago in version 2.0.0. The plugin runs on over 5 million sites.
The file: wpforms-lite/src/SetupWizard/Bridge.php.
What it does:
It takes over your browser and opens their app on WPForms' servers. It hands





