AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-49345: WP-EasyArchives <= 3.1.2 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-49345 in Wp Easyarchives (CVSS 4.3): WP-EasyArchives. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62138: Advanced PDF <= 1.1.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-62138 in Wp Advanced Pdf (CVSS 5.3): Advanced PDF. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-63014: Gmedia Photo Gallery <= 1.24.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-63014 in Grand Media (CVSS 4.3): Gmedia Photo Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.25.0.
March 18, 2026
CVE-2025-63022: Simple Like Page <= 1.5.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-63022 in Simple Facebook Plugin (CVSS 5.3): Simple Like Page. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-63040: Post Snippets <= 4.0.11 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-63040 in Post Snippets (CVSS 4.3): Post Snippets. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.12.
March 18, 2026
CVE-2025-63053: Master Addons for Elementor <= 2.0.9.9.4 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2025-63053 in Master Addons (CVSS 5.3): Master Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.1.0.
March 18, 2026
CVE-2025-49349: Reuters Direct <= 3.0.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-49349 in Reuters Direct (CVSS 5.3): Reuters Direct. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-63005: Tooltips <= 10.8.3 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-63005 in Wordpress Tooltips (CVSS 6.4): Tooltips. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62108: Add Custom Codes <= 4.80 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-62108 in Add Custom Codes (CVSS 4.3): Add Custom Codes. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.0.
March 18, 2026
CVE-2025-62146: MX Time Zone Clocks <= 5.1.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62146 in Mx Time Zone Clocks (CVSS 6.4): MX Time Zone Clocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62129: RestroPress <= 3.2.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-62129 in Restropress (CVSS 5.3): RestroPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.2.8.
March 18, 2026
CVE-2025-62149: Add Custom Codes <= 4.80 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62149 in Add Custom Codes (CVSS 6.4): Add Custom Codes. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.0.
March 18, 2026
CVE-2025-62742: Curator.io <= 1.9.5 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62742 in Curatorio (CVSS 6.4): Curator.io. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.9.6.
March 18, 2026
CVE-2025-62095: Bootstrap Modals <= 1.3.2 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62095 in Bootstrap Modals (CVSS 6.4): Bootstrap Modals. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62134: Contact Form Widget <= 1.5.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-62134 in New Contact Form Widget (CVSS 4.3): Contact Form Widget. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62096: Maximum Products per User for WooCommerce <= 4.4.3 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62096 in Maximum Products Per User For Woocommerce (CVSS 6.4): Maximum Products per User for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.4.4.
March 18, 2026
CVE-2025-62150: History Timeline <= 1.0.6 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-62150 in Timeline Awesome (CVSS 4.3): History Timeline. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62758: Funnelforms Free <= 3.8 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62758 in Funnelforms Free (CVSS 6.4): Funnelforms Free. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62756: The Moneytizer <= 10.0.9 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62756 in The Moneytizer (CVSS 6.4): The Moneytizer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 10.0.10.
March 18, 2026
CVE-2025-66158: Gmaper for Elementor <= 1.0.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-66158 in Gmaper Elementor (CVSS 4.3): Gmaper for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.