GPT-5.6 Sol Ultra Found Wp2shell RCE That Could Be Worth $500,000 for About $25

Cybersecuritynews •Abinaya • July 20, 2026

GPT-5.6 Sol Ultra has reportedly uncovered a critical pre-authentication remote code execution (RCE) vulnerability in WordPress after approximately $25 worth of AI usage. This highlights how advanced models could reshape vulnerability research. Researchers at Searchlight Cyber tasked GPT-5.6 Sol Ultra with auditing a local copy of the WordPress source code using four AI agents over […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GPT-5.6 Discovers $500k WordPress RCE Vulnerability for $25 Researchers at Searchlight Cyber utilized GPT-5.6 Sol Ultra to identify a critical pre-authentication remote code execution (RCE) vulnerability in WordPress. The AI model reportedly found the vulnerability after approximately $25 of usage, demonstrating the potential of advanced AI in vulnerability research. The exploit allows attackers to execute code without authentication, posing a significant risk to WordPress instances. The vulnerability was confirmed by independent researchers, and exploit brokers are willing to pay up to $500,000 for the details. Affected systems include all current versions of WordPress. The discovery was made public on July 20, 2026, after researchers allowed time for defenders to upgrade their systems. Tools for checking vulnerabilities have been made available to users. 2 sources 72

Extracted Entities

GPT-5.6 Sol Ultra Found Wp2shell RCE That Could Be Worth $500,000 for About $25

The full story

Extracted Entities

Attack Types (1)

Platforms (1)

Vulnerabilities (1)