Tag: wordpress
All the articles with the tag "wordpress".
-
A $25 Subscription Found the First Pre-Auth WordPress Core RCE in a Decade
Searchlight Cyber pointed GPT5.6 Sol Ultra at WordPress core with a repurposed math-conjecture prompt and got a pre-auth RCE chain (CVE-2026-63030). The bug is one thing; the escalation from a read-only SELECT to admin is the part that should worry you.