Some of the biggest web hosting sites were vulnerable to simple account takeover hacks

In some cases, clicking on a simple link would have been enough for Paulos Yibela, a well-known and respected bug hunter, to take over the accounts of anyone using five large hosting providers — Bluehost, Dreamhost, Hostgator, OVH, and iPage.

from Pocket https://techcrunch.com/2019/01/14/web-hosting-account-hacks/
via TV Aerials Leeds