Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25 › Searchlight Cyber

Global Science Wed, 22 Jul 2026 07:16:59 GMT Moderate confidence — 64/100

If you’re running WordPress and want to check if your instance is vulnerable, you can use our tool we’ve hosted here: https://wp2shell.com/.
We held off on publishing this issue to give defenders a chance to upgrade their WordPress instances over the weekend, but during that time, Calif and Hacktron were able to independently reproduce the full chain before other PoCs surfaced on GitHub.
The Story of wp2shell Like most security researchers, we follow the new model releases at Searchlight Cyber very closely.

If you’re running WordPress and want to check if your instance is vulnerable, you can use our tool we’ve hosted here: https://wp2shell.com/.
We held off on publishing this issue to give defenders a chance to upgrade their WordPress instances over the weekend, but during that time, Calif and Hacktron were able to independently reproduce the full chain before other PoCs surfaced on GitHub.
The Story of wp2shell Like most security researchers, we follow the new model releases at Searchlight Cyber very closely.

Sources: Slcyber