GPT-5.6 Sol Ultra Found Wp2shell RCE Flaw That Could Be Worth $500,000 for About $25

GPT-5.6 Sol Ultra has reportedly uncovered a critical pre-authentication remote code execution (RCE) vulnerability in WordPress after approximately $25 worth of AI usage. This highlights how advanced models could reshape vulnerability research. Researchers at Searchlight Cyber tasked GPT-5.6 Sol Ultra with auditing a local copy of the WordPress source code using four AI agents over at least six hours. The model identified a complete exploit chain that could allow an unauthenticated attacker to gain administrator privileges and ultimately execute arbitrary code on vulnerable WordPress sites. The researchers estimated the potential damage from this issue at up to $500,000, reflecting the high value typically assigned to reliable...

Read the full article at the source.