This is an exploiter for the Content Injection vulnerability Sucuri Labs found in Wordpress 4.7.(0|1) .. You can find the technical and detailed writeup here (https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html).
Visit the site that you think is vulnerable, and paste the code in console.
~ Abk Khan [ @asystolik ]