Are you actually though? Because if you were actually wondering this, it wouldn’t take a genius to figure out that you can very easily stop wondering by googling something along the lines of “what websites were downed on account of the recent php vulnerability”. But you clearly haven’t. So why the fuck are you even in this conversation?

A large installed base of web apps including giants like Wordpress combined with a desire not to migrate when something is working.