AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-62757: WebMan Amplifier <= 1.5.12 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62757 in Webman Amplifier (CVSS 6.4): WebMan Amplifier. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.0.
March 18, 2026
CVE-2025-49355: Accessibility Press <= 1.0.2 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-49355 in Ilogic Accessibility (CVSS 4.4): Accessibility Press. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-63038: Custom Admin Interface <= 7.40 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-63038 in Wp Custom Admin Interface (CVSS 4.3): Custom Admin Interface. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 7.41.
March 18, 2026
CVE-2025-62133: FormFacade <= 1.4.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-62133 in Formfacade (CVSS 4.3): FormFacade. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14428: My Sticky Elements <= 2.3.3 Missing Authorization to Authenticated (Subscriber+) Arbitrary Bulk Lead Deletion PoC, Patch Analysis & Rule
Medium CVE-2025-14428 in Mystickyelements (CVSS 4.3): My Sticky Elements. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.4.
March 18, 2026
CVE-2025-69056: Hotel Listing <= 1.4.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69056 in Hotel Listing (CVSS 6.1): Hotel Listing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-63021: Valenti Engine <= 1.0.3 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-63021 in Valenti Engine (CVSS 6.4): Valenti Engine. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62140: Locatoraid Store Locator <= 3.9.65 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62140 in Locatoraid (CVSS 4.4): Locatoraid Store Locator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62992: Everest Backup <= 2.3.9 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-62992 in Everest Backup (CVSS 4.3): Everest Backup. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.11.
March 18, 2026
CVE-2025-69054: Super Logos Showcase <= 2.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69054 in Superlogoshowcase Wp (CVSS 6.1): Super Logos Showcase. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-49338: Flowbox <= 1.1.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-49338 in Flowbox (CVSS 5.3): Flowbox. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-49346: Simple Archive Generator <= 5.2 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-49346 in Simple Archive Generator (CVSS 4.3): Simple Archive Generator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62142: Post Video Players <= 1.163 Authenticated (Editor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62142 in Video Playlist And Gallery Plugin (CVSS 4.4): Post Video Players. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62087: Sticky Notes for WP Dashboard <= 1.2.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-62087 in Wb Sticky Notes (CVSS 4.3): Sticky Notes for WP Dashboard. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.5.
March 18, 2026
CVE-2025-59137: Behance Portfolio Manager <= 1.7.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-59137 in Portfolio Manager Powered By Behance (CVSS 4.3): Behance Portfolio Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.0.
March 18, 2026
CVE-2025-62143: Post Video Players <= 1.163 Authenticated (Contributor+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-62143 in Video Playlist And Gallery Plugin (CVSS 4.3): Post Video Players. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-59135: Behance Portfolio Manager <= 1.7.5 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-59135 in Portfolio Manager Powered By Behance (CVSS 4.4): Behance Portfolio Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.0.
March 18, 2026
CVE-2025-63000: Sermon Manager <= 2.30.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-63000 in Sermon Manager For Wordpress (CVSS 6.4): Sermon Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62098: Portfolio Gallery <= 1.4.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-62098 in Gallery Portfolio (CVSS 4.3): Portfolio Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-62744: Page Title Splitter <= 2.5.9 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-62744 in Page Title Splitter (CVSS 6.4): Page Title Splitter. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.