SandyWP is awesome. And I exploited it.

The owner of SandyWP asked me to look for bugs. I went in blind, drove the whole test with Claude Code, and found a single shared secret that unlocks every sandbox on the platform. Here is how, and why I still recommend it.