Comment by paulfurley

I’d suggest that running a vulnerable production service is asking for trouble!

My web logs are full of automated scanners. Once when I ran a vulnerable version of Wordpress it got discovered and pwned very quickly. No need to enter the URL in any website ;)