Hacked by – WordPress Rest API Vulnerability in the Wild

As WordPress continues to grow in popularity, so does the complexity of this open source CMS. WordPress has come a long way from its early days in 2003 as a basic blogging platform and has become the most popular online publishing platform in the world. Your website is a valuable business research, and just like in real-life there are individuals out there who want to take advantage of opportunities to benefit at the expense of others. If you own a website built in WordPress, then you know the ease and accessibility the open source CMS offers. However, the continued additions to WordPress can leave ways that hackers can use to access your website without your authorization.
The API Rest Vulnerability Found In The Wild
The most recent exploit was discovered on January 20, 2017, by WordPress security firm Sucuri. Marc-Alexandre Montpas, a security analyst at Sucuri, was the first to find the vulnerability during routine checks of open source projects. After discovering this vulnerability, Montpas promptly notified the WordPress security team and passed along his findings.
Upon their notification, WordPress contacted various companies to help protect users while they developed a fix for
Source: https://managewp.org/articles/14372/hacked-by-wordpress-rest-api-vulnerability-in-the-wild

source https://williechiu40.wordpress.com/2017/02/10/hacked-by-wordpress-rest-api-vulnerability-in-the-wild/