AI Agent Automates WordPress CVE Reversal and PoC Generation

Summary

The video demonstrates an AI-assisted workflow that filters WordPress plugin CVEs, compares vulnerable and patched versions, and generates proof-of-concept write-ups and Nuclei templates for testing, with results archived in GitHub.

Key points

• The presenter demonstrates reversing vulnerabilities by comparing patched code with vulnerable versions to identify the bug and develop proof-of-concept material.
• The workflow filters WordPress plugin vulnerabilities from Patchstack by severity and skips issues that require admin access.
• Cloud Code and Zapier MCP automate fetching CVE records, comparing plugin versions, and generating reports, reproduction details, PoCs, and Nuclei templates.
• Generated material is saved to a GitHub repository, with Google Sheets set up as an optional searchable backup.
• The presenter says the workflow is intended for local labs, not as a turnkey mass-exploitation tool.
• A displayed report labels one generated example as an unauthenticated SSRF; the presenter later reports that a generated PoC worked on a testing instance.
• The presenter describes the output as an early version, notes that a Nuclei template may need refinement, and suggests scheduling the process to run regularly.