AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-14947: All-in-One Video Gallery <= 4.6.4 Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion PoC, Patch Analysis & Rule
Medium CVE-2025-14947 in All In One Video Gallery (CVSS 6.5): All-in-One Video Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.7.1.
March 18, 2026
CVE-2025-14745: RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode PoC, Patch Analysis & Rule
Medium CVE-2025-14745 in Wp Rss Aggregator (CVSS 6.4): RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.0.11.
March 18, 2026
CVE-2025-69193: Membership <= 1.6.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69193 in Wp Membership (CVSS 5.3): Membership. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68047: Eventin <= 4.1.3 Authenticated (Contributor+) PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2025-68047 in Wp Event Solution (CVSS 7.5): Eventin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.1.4.
March 18, 2026
CVE-2025-69292: Membership <= 1.6.4 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2025-69292 in Wp Membership (CVSS 8.8): Membership. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24555: ArtPlacer Widget <= 2.23.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24555 in Artplacer Widget (CVSS 6.4): ArtPlacer Widget. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68072: Easy Property Listings <= 3.5.20 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68072 in Easy Property Listings (CVSS 5.3): Easy Property Listings. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.21.
March 18, 2026
CVE-2025-69185: Hotel Listing <= 1.4.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69185 in Hotel Listing (CVSS 5.3): Hotel Listing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68059: Hotel Listing <= 1.4.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68059 in Hotel Listing (CVSS 4.3): Hotel Listing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69187: Final User <= 1.2.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69187 in Final User (CVSS 5.3): Final User. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24563: LifePress <= 2.2.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24563 in Lifepress (CVSS 4.3): LifePress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.2.2.
March 18, 2026
CVE-2025-69293: Final User <= 1.2.5 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2025-69293 in Final User (CVSS 8.8): Final User. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69186: Hospital Doctor Directory <= 1.3.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69186 in Hospital Doctor Directory (CVSS 5.3): Hospital Doctor Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69191: ListingHub <= 1.2.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69191 in Listinghub (CVSS 5.3): ListingHub. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68057: Hospital Doctor Directory <= 1.3.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68057 in Hospital Doctor Directory (CVSS 4.3): Hospital Doctor Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69183: Hospital Doctor Directory <= 1.3.9 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2025-69183 in Hospital Doctor Directory (CVSS 8.8): Hospital Doctor Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-13921: weDocs <= 2.1.16 Missing Authorization to Authenticated (Subscriber+) Documentation Post Update PoC, Patch Analysis & Rule
Medium CVE-2025-13921 in Wedocs (CVSS 4.3): weDocs. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.1.17.
March 18, 2026
CVE-2025-69189: JobBank <= 1.2.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69189 in Jobbank (CVSS 5.3): JobBank. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-0914: WP DSGVO Tools (GDPR) <= 3.1.36 Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-0914 in Shapepress Dsgvo (CVSS 6.4): WP DSGVO Tools (GDPR). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.1.37.
March 18, 2026
CVE-2025-68869: LazyTasks <= 1.2.37 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2025-68869 in Lazytasks Project Task Management (CVSS 9.8): LazyTasks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.01.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.