The REST API allows plugins, themes and other applications to manipulate WordPress content and create interactive functionalities. This technology extends what the WordPress core can do.

Ms. Baker said she hopes the new API will be implemented into WordPress Core (which means it would be added to sites when they update) with version 4.4, by this December, though she’s not part ...

WordPress' ubiquity has driven it to enjoy a rich ecosystem of connectivity and integration, something that the baked-in WordPress REST API now extends that connectivity infinitely.

The REST API is enabled by default on all sites using WordPress 4.7.0 or 4.7.1. If you are running these versions of the CMS, you are vulnerable to this attack.

According to the WordPress security firm, the plugin works by setting up a WordPress REST-API endpoint but does not check that commands sent to this REST API are coming from authorized users (i.e ...