Programmatic Spamdexing Operations Exploit Open WordPress REST APIs to Extract 100 Million Lines of Text
The extraction method exploits unauthenticated WordPress REST API endpoints (/wp-json/) to pull bulk text across thousands of domains without triggering DOM parsing overhead, notes Romain Pirotte.