I feel like I've seen plenty of non-AI, pre-2020 SAST tools catch SQLis like the one mentioned here, and if nothing else, then a code review ought to catch it. Is WordPress not using code reviews and/or SAST?
I found a WordPress RCEs with GPT5.6 and $25
91–100 of 247 posts
Re: I found a WordPress RCEs with GPT5.6 and $25
#92There is no evidence that $500k has been paid or would be paid for an exploit like this one. Given that the article says that prompts are modified like they are holy scripture, perhaps sell the prompt for $500k. The author works for https://www.assetnote.io/ , which has AI products for automated scanning.
[flagged]
Re: I found a WordPress RCEs with GPT5.6 and $25
#93The surprising (and possibly untrue) thing is the high price of canned vulnerabilities. WordPress is known as the remote root shell with a blogging feature.
I still don't understand why, for a blog, a static page isn't enough - especially since most of the WordPress issues are "solved" by adding caching. I do understand it from an user perspective (it's easier to tell the average user to drag and drop rather than committing to a GitHub repo and letting hugo build the website), but from a security standpoint WordPress is really just waiting for a vulnerability (either in…
- Anyone can edit it
- Less training; org probably has someone who’s used Wordpress before. (Yes, training. You must deal with the reality of the typical user.)
- In the developing group or agency, anyone can work on the theme if you install a theme builder. An agency can put a cheaper content marketer or designer on it, rather than a developer.
Re: I found a WordPress RCEs with GPT5.6 and $25
#94That was an incredible writeup! Chapeau to the author - thanks for taking the time to do a writeup. When Anthropic claimed Mythos chained 4 or 5 bugs to achieve sandbox escape and found bugs in core software, it sounded like bs. But here we are 2 months later seeing what they meant. Cybersecurity was always a hard sell; security flaws were invisible - by contrast a fence with a hole is visible to everyone - anyone ca…
| We will all benefit from more secure systems the people that can afford it, sure.
Can some people not afford open source software?
Re: I found a WordPress RCEs with GPT5.6 and $25
#95I am so done with FOMO writing. Sure man, you found one with $25. With $25 plus your entire industry domain specific knowledge of where to look, of how to probe, of what else you may have accumulated and collected over the years of working within this industry. Let's stop with the gambling narrative and the illusion that we are all missing out.
Re: I found a WordPress RCEs with GPT5.6 and $25
#96Earlier quoted context omitted.
To construct dynamic sql queries to have to string concatenate at least some parts, . User data should of course be passed via prepared statements.
Not user code, no. Someone eventually has to, but virtually every ORM under the sun allows you to construct dynamic queries without having to concatenate strings yourself or resort to string interpolation.
Quick search shows this in Wordpress:
> WordPress database access abstraction class.
class wpdb {}
$results = $wpdb->get_results( "SELECT * FROM {$wpdb->prefix}options WHERE option_id = 1", OBJECT );
It does not however prevent $wpdb users from NOT binding query parameters, which leads to this vulnerability.
Re: I found a WordPress RCEs with GPT5.6 and $25
#97Does Sol allow this kind of research by default or is this a "look at me I'm on the cyber research allowlist" post?
Re: I found a WordPress RCEs with GPT5.6 and $25
#98Earlier quoted context omitted.
It's just because they don't want to break anything in existing sites, sorta like how Microsoft doesn't generally want to break programs on Windows. So, changes are fairly incremental, and the quality is about what you'd expect from a piece of software that's decades old with no plan for what happens if it got this far. But what do you do in that situation? If they change the structure too much, then either they make…
they broke tons of stuff with Gutenberg/block editor and didn't seem to be bothered by backwards compat
Not only did they break classic WordPress stuff, but they also keep breaking Gutenberg APIs at a really frustrating rate.
It’s clear that the core WordPress developers have a very different idea of project stewardship than the Gutenberg devs do.
Re: I found a WordPress RCEs with GPT5.6 and $25
#99There is no evidence that $500k has been paid or would be paid for an exploit like this one. Given that the article says that prompts are modified like they are holy scripture, perhaps sell the prompt for $500k. The author works for https://www.assetnote.io/ , which has AI products for automated scanning.
Likely referencing https://www.crowdfense.com/exploit-acquisition-program/
Zerodium used to offer up to 300k in 2021 https://www.securityweek.com/sites/default/files/images/Zero...
These brokers usually don't pay the bulk sum - they sell access to nation actors and you get payed out over time as long as the bug is not patched to discourage reselling and burning it. I doubt anyone would confirm if they got the full payment or not for something similar.
Re: I found a WordPress RCEs with GPT5.6 and $25
#100[deleted]