I found miss-configurations in one of WSO2 Website (11 Oct, 2018)
I reported about miss-configuration in one of WSO2 Website (www.wso2con.com). They replied me and inform me that they are added the required security configurations to their website.