20K WordPress Sites Exposed by Insecure Plugin REST-API
-
The WordPress WP HTML Mail plugin for personalized emails is vulnerable to code injection and phishing due to XSS.
https://threatpost.com/wordpress-insecure-plugin-rest-api/177866/