GPT-5.6 WordPress RCE

Jul
21
Graphic showing GPT-5.6 tracing a WordPress REST API flaw to a pre-authentication RCE for an estimated $25, followed by human verification; versions 7.0.2 and 6.9.5 are marked patched.

GPT-5.6 found a WordPress RCE for $25. The expensive part came next

GPT-5.6 Sol Ultra found a pre-authentication WordPress RCE in a multi-agent research run. The AI part was cheap, verifying and disclosing it wasn't.
3 min read