AI‑driven Prompt Finds WordPress Pre‑Auth RCE for $25, Shaking Zero‑Day Market
Security researcher Adam Kues used OpenAI’s GPT‑5.6 Sol Ultra with a custom Cycle Double Cover prompt to uncover a pre‑authentication remote‑code‑execution chain in WordPress core, spending just $25 in API credits. The find illustrates how generative AI can cheapen zero‑day discovery, while exploit brokers are already offering $500k for such exploits.