Add module doc to appease the @h00die god

Straight rip of the PR description, yo.

Author: wvu

documentation/modules/auxiliary/scanner/http/wordpress_content_injection.rb

@@ -0,0 +1,37 @@
+**Feature description:**
+
+This adds a module for the WordPress 4.7/4.7.1
+content injection vulnerability detailed at
+https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html.
+
+**Verification steps:**
+
+- [ ] Download https://wordpress.org/wordpress-4.7.1.tar.gz
+- [ ] `tar xf wordpress-4.7.1.tar.gz -C /var/www/html --no-same-owner`
+- [ ] Ensure the install dir is not writable by the web user (prevents autoupdating)
+- [ ] Install the sucker
+- [ ] Set `ACTION` to either `LIST` or `UPDATE`
+- [ ] Set `POST_ID` and `POST_TITLE`, `POST_CONTENT`, and/or `POST_PASSWORD`
+- [ ] Run the module
+- [ ] ~~Add your defacement to Zone-H~~ jk
+
+**Sample run:**
+
+This is just the `LIST` action...
+
+```
+msf auxiliary(wordpress_content_injection) > run
+
+[*] REST API found in HTML document
+Posts at https://[redacted]:443/ (REST API: /wp-json/wp/v2)
+============================================================
+
+ID  Title         URL                                                Status     Password
+--  -----         ---                                                ------     --------
+1   Hello world!  https://[redacted]/2016/10/hello-world/            Published  No
+87  Hello world!  https://[redacted]/2016/08/hello-world-2/          Published  No
+
+[*] Scanned 1 of 1 hosts (100% complete)
+[*] Auxiliary module execution completed
+msf auxiliary(wordpress_content_injection) >
+```