From: Defiant, INC:
A few minutes ago the Wordfence Threat Intelligence Team published details of a vulnerability in the Nested Pages plugin. This vulnerability allows an attacker to delete posts and pages, unpublish pages, or assign them to a different author in bulk.