Intruder Unveils AI 'Vulnerability Vending Machine' That Found a WordPress Zero-Day Unaided

Security firm Intruder has built an automated pipeline that pairs static code analysis with large language models to hunt for software zero-days, and used it to autonomously discover and exploit a previously unknown SQL injection flaw in a widely deployed WordPress plugin. The system, which the company dubs a "vulnerability vending machine," is designed to accept AI tokens as input and produce working exploits as output, with no human intervention in the loop.