Apparently this megahost in Poland has 40K vulnerable servers. Would be great to contact them and get them do update.
Sure, I will.
Seems like they already know about that. There is info at https://pomoc.home.pl/komunikaty/914 that they are going to update Postgres to 9.0.13 in a couple of days.