You Can't Just Publish Partial Exploits Anymore

Taking a 'safely' disclosed WordPress RCE most of the way to a full unauthenticated exploit chain with public research, a patch diff, and an LLM, and the rest with a public PoC.