{
  "entrypoint_kind": "api_remote",
  "entrypoint_detail": "POST /wp-json/wp/v2/block-renderer/<block> (WordPress REST; context=edit in body only, not in query string)",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "mariadb",
    "wordpress-core",
    "widget-options-plugin",
    "php-built-in-server"
  ],
  "proof_artifacts": [
    "logs/exploit_vuln.log",
    "logs/exploit_fixed.log",
    "logs/php-server.err",
    "repro/wo_rce_proof.php",
    "repro/wo_rce_proof.txt"
  ],
  "notes": "Contributor RCE confirmed on Widget Options 4.2.3 via block-renderer Display Logic eval bypass; fixed 4.2.4 blocks it."
}