Latest / Cyber Security Diaries from StationX
My AI Hacked a Plugin Running on 4M WordPress Sites | EP 36
My AI found an admin login bypass in a WordPress security plugin running on 4 million sites, then broke in with no password. Here's the real skill behind it.
I asked HAL, my AI hacking agent, to find a way into a WordPress security plugin installed on 4 million websites. Five AI models from Claude, OpenAI and Google reviewed the code at once, so none of them marked their own homework. Every one independently found the same critical bug. HAL explained it in plain English, then built a working exploit: log in as administrator with no password and no two-factor.
The break-in isn't the point. On…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.