This website is vulnerable because it serves all content over insecure HTTP connections instead of secure HTTPS, leaving sensitive data exposed.
To resolve this issue, configure your server to use SSL/TLS certificates and serve the site over HTTPS.