Redirect to Drugstore Sites

Tara’s answer is the best answer to your question. I just want to mention to you and anyone reading this thread that a vulnerability in WP core is very unlikely, a vulnerability in a theme or plugin is much more likely. If you’ve reasonably identified the actual avenue of attack, do everyone a favor and report the details privately to those responsible for the vulnerable code.

See Reporting Security Vulnerabilities for more information.