AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-24583: SumUp Payment Gateway For WooCommerce <= 2.7.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24583 in Sumup Payment Gateway For Woocommerce (CVSS 5.3): SumUp Payment Gateway For WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.7.10.
March 18, 2026
CVE-2025-68836: Table of Contents Creator <= 1.6.4.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68836 in Table Of Contents Creator (CVSS 6.1): Table of Contents Creator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68018: Order Listener for WooCommerce <= 3.6.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68018 in Woc Order Alert (CVSS 5.3): Order Listener for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.6.2.
March 18, 2026
CVE-2025-68073: GDPR CCPA Compliance Support <= 2.7.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68073 in Ninja Gdpr Compliance (CVSS 4.3): GDPR CCPA Compliance Support. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.7.5.
March 18, 2026
CVE-2026-24584: Tutor LMS BunnyNet Integration <= 1.0.0 Authenticated (Tutor instructor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24584 in Tutor Lms Bunnynet Integration (CVSS 6.4): Tutor LMS BunnyNet Integration. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.1.
March 18, 2026
CVE-2026-24585: Hyyan WooCommerce Polylang Integration <= 1.5.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24585 in Woo Poly Integration (CVSS 4.3): Hyyan WooCommerce Polylang Integration. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24588: Smart Product Viewer <= 1.5.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24588 in Smart Product Viewer (CVSS 4.3): Smart Product Viewer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24984: Visual Link Preview <= 2.2.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24984 in Visual Link Preview (CVSS 4.3): Visual Link Preview. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.0.
March 18, 2026
CVE-2026-24982: Spectra <= 2.19.17 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24982 in Ultimate Addons For Gutenberg (CVSS 5.3): Spectra. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.19.18.
March 18, 2026
CVE-2026-24587: AJAX Hits Counter + Popular Posts Widget <= 0.10.210305 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24587 in Ajax Hits Counter (CVSS 4.3): AJAX Hits Counter + Popular Posts Widget. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24355: Houzez Theme Functionality <= 4.2.6 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24355 in Houzez Theme Functionality (CVSS 6.4): Houzez Theme - Functionality. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69300: Premium Addons for Elementor <= 4.11.63 Missing Authorization to Authenticated (Subscriber+) Settings Update PoC, Patch Analysis & Rule
Medium CVE-2025-69300 in Premium Addons For Elementor (CVSS 4.3): Premium Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.11.64.
March 18, 2026
CVE-2026-24549: GeoDirectory <= 2.8.149 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-24549 in Geodirectory (CVSS 4.3): GeoDirectory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.8.150.
March 18, 2026
CVE-2026-24551: Monetag Official <= 1.1.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24551 in Monetag Official (CVSS 4.3): Monetag Official. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.2.5.
March 18, 2026
CVE-2026-24550: Blockons <= 1.2.15 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24550 in Blockons (CVSS 6.4): Blockons. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2024-11976: BuddyPress <= 14.3.3 Unauthenticated Arbitrary Shortcode Execution PoC, Patch Analysis & Rule
High CVE-2024-11976 in Buddypress (CVSS 7.3): BuddyPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 14.3.4.
March 18, 2026
CVE-2025-67969: UPI QR Code Payment Gateway for WooCommerce <= 1.5.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67969 in Upi Qr Code Payment For Woocommerce (CVSS 5.3): UPI QR Code Payment Gateway for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.1.
March 18, 2026
CVE-2026-24992: Advanced WooCommerce Product Sales Reporting <= 4.1.2 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-24992 in Webd Woocommerce Advanced Reporting Statistics (CVSS 5.3): Advanced WooCommerce Product Sales Reporting. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.1.3.
March 18, 2026
CVE-2025-69295: Coven Core <= 1.3 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2025-69295 in Coven Core (CVSS 7.5): Coven Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14069: Schema & Structured Data for WP & AMP <= 1.54 Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema PoC, Patch Analysis & Rule
Medium CVE-2025-14069 in Schema And Structured Data For Wp (CVSS 6.4): Schema & Structured Data for WP & AMP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.54.1.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.