wordpress Discovery of WordPress websites using wp-json WordPress exposes a new REST API since version 4.7. This API can be exploited to retrieve potential confidential information.