Many CMS plugins are disabling TLS certificate validation... and that's very bad

Hundreds of thousands of CMS plugins and PHP libraries are disabling cURL certificate validation and putting millions of users at risk.