GPT-5.6 Sol Ultra finds a production pre-auth WordPress RCE (wp2shell/CVE-2026-63030) worth $500k on exploit markets for ~$25 in API credits.

Why It Matters

Needs editorial pass.

Evidence

Primary Searchlight Cyber / slcyber.io technical blog post (published ~July 20, 2026; detailed prompt, exploit chain, PoC artifacts); top HN thread; follow-up X/Reddit discussion and Techzine coverage.

Signal Read

Source Trail

Daily scan: 2026-07-20

• slcyber.iohttps://slcyber.io/research-center/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6/
• techzine.euhttps://www.techzine.eu/news/security/143002/gpt-5-6-sol-discovered-a-wp2shell-exploit-in-ten-hours/