AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-24571: BOX NOW Delivery <= 3.0.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24571 in Box Now Delivery (CVSS 4.3): BOX NOW Delivery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67954: Salon booking system <= 10.30.3 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Low CVE-2025-67954 in Salon Booking System (CVSS 3.1): Salon booking system. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67955: MyHome Core <= 4.1.0 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2025-67955 in Myhome Core (CVSS 8.1): MyHome Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24572: Nelio Content <= 4.2.0 Authenticated (Contributor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-24572 in Nelio Content (CVSS 6.5): Nelio Content. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.1.
March 18, 2026
CVE-2025-67956: User Registration <= 4.4.6 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67956 in User Registration (CVSS 5.3): User Registration. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.4.7.
March 18, 2026
CVE-2026-24566: iNET Webkit <= 1.2.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24566 in Inet Webkit (CVSS 4.3): iNET Webkit. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67961: WPO365 <= 40.0 Authenticated (Subscriber+) Server-Side Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-67961 in Wpo365 Login (CVSS 6.4): WPO365. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 40.1.
March 18, 2026
CVE-2025-67960: WorkScout-Core <= 1.7.06 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-67960 in Workscout Core (CVSS 7.2): WorkScout-Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24568: Travel <= 11.1.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24568 in Wp Travel (CVSS 5.3): Travel. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 11.1.1.
March 18, 2026
CVE-2025-68035: Tabby Checkout <= 5.8.4 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-68035 in Tabby Checkout (CVSS 5.3): Tabby Checkout. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.9.1.
March 18, 2026
CVE-2026-24990: WP Docs <= 2.2.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24990 in Wp Docs (CVSS 4.3): WP Docs. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.2.9.
March 18, 2026
CVE-2026-24570: Edwiser Bridge <= 4.3.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24570 in Edwiser Bridge (CVSS 4.3): Edwiser Bridge. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.3.3.
March 18, 2026
CVE-2025-68039: BackItUp <= 2.1.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68039 in Wp Backitup (CVSS 5.3): BackItUp. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24565: B Accordion <= 2.0.2 Authenticated (Contributor+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-24565 in B Accordion (CVSS 4.3): B Accordion. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.0.3.
March 18, 2026
CVE-2025-69318: JobWP <= 2.4.5 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-69318 in Jobwp (CVSS 7.2): JobWP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.6.
March 18, 2026
CVE-2026-24564: Textmetrics <= 3.6.3 Authenticated (Subscriber+) Arbitrary Shortcode Execution PoC, Patch Analysis & Rule
Medium CVE-2026-24564 in Webtexttool (CVSS 5.4): Textmetrics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.6.4.
March 18, 2026
CVE-2025-67966: Lawyer Directory <= 1.3.3 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2025-67966 in Lawyer Directory (CVSS 8.8): Lawyer Directory. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2025-67963: Movie Booking <= 1.1.5 Unauthenticated Arbitrary File Deletion PoC, Patch Analysis & Rule
Critical CVE-2025-67963 in Movie Booking (CVSS 9.1): Movie Booking. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68857: Paid Downloads <= 3.15 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2025-68857 in Paid Downloads (CVSS 7.5): Paid Downloads. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69180: Ultra Portfolio <= 6.7 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2025-69180 in Ultra Portfolio (CVSS 6.5): Ultra Portfolio. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.