AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-68881: AppExperts <= 1.4.5 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2025-68881 in Appexperts (CVSS 6.5): AppExperts. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68058: Institutions Directory <= 1.3..4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68058 in Institutions Directory (CVSS 4.3): Institutions Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69184: Institutions Directory <= 1.3.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69184 in Institutions Directory (CVSS 5.3): Institutions Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69181: Lawyer Directory <= 1.3.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69181 in Lawyer Directory (CVSS 5.3): Lawyer Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67967: Lawyer Directory <= 1.3.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67967 in Lawyer Directory (CVSS 4.3): Lawyer Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69182: Institutions Directory <= 1.3.4 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2025-69182 in Institutions Directory (CVSS 8.8): Institutions Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69192: Real Estate Pro <= 2.1.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69192 in Real Estate Pro (CVSS 5.3): Real Estate Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24558: ABG Rich Pins <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24558 in Abg Rich Pins (CVSS 6.4): ABG Rich Pins. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69188: Fitness Trainer <= 1.7.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69188 in Fitness Trainer (CVSS 5.3): Fitness Trainer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67964: Homey Core <= 2.4.3 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-67964 in Homey Core (CVSS 7.2): Homey Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24561: FluentBoards <= 1.91.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24561 in Fluent Boards (CVSS 4.3): FluentBoards. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.91.2.
March 18, 2026
CVE-2025-14892: Prime Listing Manager <= 1.1 Unauthenticated Privilege Escalation via Account Takeover PoC, Patch Analysis & Rule
Critical CVE-2025-14892 in Prime Listing Manager (CVSS 9.8): Prime Listing Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24556: ElementCamp <= 2.3.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24556 in Element Camp (CVSS 5.3): ElementCamp. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-0920: LA-Studio Element Kit for Elementor <= 1.5.6.3 Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter PoC, Patch Analysis & Rule
Critical CVE-2026-0920 in Lastudio Element Kit (CVSS 9.8): LA-Studio Element Kit for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1036: Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 Missing Authorization to Unauthenticated Arbitrary Comment Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-1036 in Photo Gallery (CVSS 5.3): Photo Gallery by 10Web – Mobile-Friendly Image Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24562: Ryviu – Product Reviews for WooCommerce <= 3.1.26 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24562 in Ryviu (CVSS 5.3): Ryviu – Product Reviews for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69319: Beaver Builder <= 2.9.4.1 Authenticated (Contributor+) Remote Code Execution PoC, Patch Analysis & Rule
High CVE-2025-69319 in Beaver Builder Lite Version (CVSS 8.8): Beaver Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.9.4.2.
March 18, 2026
CVE-2026-1235: eCommerce <= 3.15.1 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2026-1235 in Wp E Commerce (CVSS 8.1): eCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24557: Contact Form 7 GetResponse Extension <= 1.0.8 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-24557 in Contact Form 7 Getresponse Extension (CVSS 5.3): Contact Form 7 GetResponse Extension. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68027: Hydra Booking <= 1.1.32 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2025-68027 in Hydra Booking (CVSS 9.8): Hydra Booking. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.33.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.