If use use @asmallorange for hosting, switch immediately. I'm in chat with them right now, and they flatly refuse to close security holes.