Censys measurement points to a maintenance problem at internet scale: outdated PHP and stale WordPress cores leave a huge public attack surface, even before any specific exploit path is identified.