AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-25451: Bold Page Builder <= 5.6.7 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25451 in Bold Page Builder (CVSS 6.4): Bold Page Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.6.8.
March 18, 2026
CVE-2025-69316: TableOn <= 1.0.4.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69316 in Posts Table Filterable (CVSS 6.1): TableOn. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68840: iRobots.txt SEO <= 1.1.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68840 in Irobotstxt Seo (CVSS 6.1): iRobots.txt SEO. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24576: UX Flat <= 5.4.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24576 in Ux Flat (CVSS 6.4): UX Flat. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22336: Directorist Booking <= 2.4.1 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-22336 in Directorist Booking (CVSS 7.5): Directorist Booking. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24986: Simple Membership WP user Import <= 1.9.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-24986 in Simple Membership Wp User Import (CVSS 4.3): Simple Membership WP user Import. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24578: Admin login URL Change <= 1.1.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24578 in Admin Login Url Change (CVSS 4.3): Admin login URL Change. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68030: Frontis Blocks <= 1.1.5 Unauthenticated Server-Side Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-68030 in Frontis Blocks (CVSS 6.5): Frontis Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.6.
March 18, 2026
CVE-2025-68839: Easy Theme Options <= 1.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68839 in Easy Theme Options (CVSS 6.1): Easy Theme Options. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67944: Nelio AB Testing <= 8.1.8 Authenticated (Editor+) Remote Code Execution PoC, Patch Analysis & Rule
High CVE-2025-67944 in Nelio Ab Testing (CVSS 7.2): Nelio AB Testing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.2.0.
March 18, 2026
CVE-2025-12573: Bookingor <= 1.0.12 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-12573 in Bookingor (CVSS 4.3): Bookingor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.13.
March 18, 2026
CVE-2025-67945: MailerLite – WooCommerce integration <= 3.1.2 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2025-67945 in Woo Mailerlite (CVSS 7.5): MailerLite – WooCommerce integration. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.1.3.
March 18, 2026
CVE-2025-67947: AdForest Elementor <= 3.0.11 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-67947 in Adforest Elementor (CVSS 7.2): AdForest Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67953: Booking Activities <= 1.16.44 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2025-67953 in Booking Activities (CVSS 9.8): Booking Activities. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.16.45.
March 18, 2026
CVE-2025-68838: MemberPress Discord Addon <= 1.1.4 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68838 in Expresstechsoftwares Memberpress Discord Add On (CVSS 6.1): MemberPress Discord Addon. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22850: Koko Analytics <= 2.1.2 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-22850 in Koko Analytics (CVSS 7.5): Koko Analytics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.1.3.
March 18, 2026
CVE-2025-68882: Scalenut <= 1.1.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68882 in Scalenut (CVSS 5.3): Scalenut. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.4.
March 18, 2026
CVE-2025-68835: Ravpage <= 2.33 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68835 in Ravpage (CVSS 6.1): Ravpage. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22337: Directorist Social Login <= 2.1.1 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2026-22337 in Directorist Social Login (CVSS 9.8): Directorist Social Login. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68858: wpCAS <= 1.07 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68858 in Wpcas (CVSS 6.1): wpCAS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.