Criminals have necessarily begun to attempt to monetize attacks against WordPress sites still to REST API endpoint silently fixed in the recent 4.7.2 security update..