Hackers Selling WordPress 0-day Exploits on Hacker Forums

A forum post advertises a WordPress 0-day "Autoshell" PHP exploit, claimed to enable uploading web shells (c99 or other PHP files) to approximately 110,000 affected sites; the seller is asking for $10k in cryptocurrency and will not go first. The article notes community monitoring, urges patching and security hardening, and highlights the illicit sale of the exploit rather than confirmed in-the-wild exploitation.