In reply to Anh Tran.

Sucuri disclosed the details a week after WP 4.7.2 was out. it was so detailed it was very easy to create an exploit without doing much research on your own.