AI vending machine finds zero-day vulnerabilities

Intruder built a pipeline using Joern and LLMs to automatically find and exploit vulnerabilities in WordPress plugins. The system discovered CVE-2026-3985, a SQL injection in Creative Mail affecting over 300,000 users. The exploit requires multiple chained requests and WooCommerce installed alongside Creative Mail.