More than 1.5 million pages defaced

More than 1.5 million Wordpress sites have been defaced after hackers took advantage of a vulnerability in the REST API, patched in WordPress version 4.7.2.