Today's PHP Security Release, and How We're Strengthening PHP Security
AI tools including Gemini and GPT discovered critical PHP RCE vulnerabilities affecting WordPress and Drupal
“Wiz Research discovers the first PHP vulnerability using Wiz Atlas, Gemini 4 Argon, and GPT-5.6 Sol.”
Wiz Research used AI tools (Gemini 4 Argon and GPT-5.6 Sol) to discover two critical PHP RCE vulnerabilities (CVSS 9.2) that affect WordPress and Drupal. The coordinated disclosure process broke down when CVE IDs leaked early, a proof-of-concept video was accidentally published, and PoC exploits began circulating before the patch was ready. This is a notable real-world example of AI-assisted vulnerability research producing high-severity findings, though the primary story is the disclosure failure rather than the AI methodology.