Researcher found a WordPress RCE exploit for $25 — brokers pay $500k for them

A security researcher discovered a critical remote code execution (RCE) vulnerability in WordPress using GPT-5.6 for just $25. Exploit brokers pay up to $500,000 for such vulnerabilities on the open market, highlighting the massive gap between the cost of finding a flaw and its commercial value.