WordPress Post Forged with post_status=parse and post_type=request via Unauthenticated REST Batch Request and post_parent Cycle
Detects potential exploitation attempts targeting WordPress sites, specifically identifying unauthenticated REST API batch requests that attempt to forge posts with post_status 'parse' and post_type 'request' while including self-referential post_parent cycles. This pattern is associated with recent vulnerabilities enabling remote code execution.
Cortex XDR
