- A researcher used GPT5.6 Sol Ultra with a custom prompt to discover a zero-day RCE vulnerability in WordPress for about $25.
- The vulnerability chain starts with a pre-authentication SQL injection via the batch API due to a validation mismatch bug.
- This SQLi is escalated to RCE by poisoning the WordPress cache, manipulating embeds to create fake posts, and exploiting changesets and hooks.
- The exploit allows an attacker to temporarily assume administrator privileges and create a new admin account, leading to code execution.
- The model found and chained complex exploitation techniques, like recursive batch calls and cache abuse, in around 10 hours, showcasing AI's potential in security research.