Cybercriminals start cashing in on vulnerable WordPress websites

Domains are being compromised through a vulnerability in the WordPress REST API.