Broadway World
WordPress 4.7 introduced new REST API content endpoints. The implementation of some endpoints was insecure, allowing unauthenticated users to modify or replace posts. Numerous attacks have been seen to leverage this vulnerability to deface WordPress

ועוד