Website with insecure PHP?

See: https://urlscan.io/result/f0c67db9-f593-4e12-b5c6-33aafd915ba4#summary
D- grade status:https://observatory.mozilla.org/analyze.html?host=voyeur-house.tv#third

Various privacy related warnings within 4 categories: https://privacyscore.org/site/86510/

See sorce code check: https://aw-snap.info/file-viewer/?protocol=secure&tgt=voyeur-house.tv&ref_sel=GSP2&ua_sel=ff&fs=1 seems OK, retrable jQuery libraries also OK.

Results from scanning URL: https://voyeur-house.tv
Number of sources found: 4
Number of sinks found: 416

PHP config: http://studioalt.ru/info.php?a[]=<a%20href%3Dhttp%3A%2F%2Fbernardoinc.com%2Findex.php%3Foption%3Dcom_k2%26view%3Ditemlist%26task%3Duser%26id%3D550401>bernardoinc.com<%2Fa>/

Consider on that precise version: https://www.cvedetails.com/vulnerability-list/vendor_id-74/product_id-128/version_id-21296/PHP-PHP-4.3.10.html

polonus (volunteer website security analyst and website error-hunter)