AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-24559: Integration for Contact Form 7 HubSpot <= 1.4.3 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-24559 in Cf7 Hubspot (CVSS 4.3): Integration for Contact Form 7 HubSpot. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.4.4.
March 18, 2026
CVE-2026-24560: Cloudinary <= 3.3.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24560 in Cloudinary Image Management And Manipulation In The Cloud Cdn (CVSS 4.3): Cloudinary. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.3.1.
March 18, 2026
CVE-2026-24553: Fraud Prevention For Woocommerce <= 2.3.2 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-24553 in Woo Blocker Lite Prevent Fake Orders And Blacklist Fraud Customers (CVSS 4.3): Fraud Prevention For Woocommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update...
March 18, 2026
CVE-2026-0927: KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 Missing Authorization to Unauthenticated Limited Arbitrary File Upload PoC, Patch Analysis & Rule
Medium CVE-2026-0927 in Kivicare Clinic Management System (CVSS 5.3): KiviCare – Clinic & Patient Management System (EHR). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-15522: Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2025-15522 in Uncanny Automator (CVSS 6.4): Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage...
March 18, 2026
CVE-2025-14866: Melapress Role Editor <= 1.1.1 Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment PoC, Patch Analysis & Rule
High CVE-2025-14866 in Melapress Role Editor (CVSS 8.8): Melapress Role Editor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69386: RVCFDI para Woocommerce <= 8.1.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69386 in Rvcfdi Para Woocommerce (CVSS 6.1): RVCFDI para Woocommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24962: Sigmize <= 0.0.9 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-24962 in Sigmize (CVSS 4.3): Sigmize. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.0.10.
March 18, 2026
CVE-2025-15027: JAY Login & Register <= 2.6.03 Unauthenticated Privilege Escalation via jay_login_register_ajax_create_final_user PoC, Patch Analysis & Rule
Critical CVE-2025-15027 in Jay Login Register (CVSS 9.8): JAY Login & Register. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.6.04.
March 18, 2026
CVE-2025-15100: JAY Login & Register <= 2.6.03 Authenticated (Subscriber+) Privilege Escalation via jay_panel_ajax_update_profile PoC, Patch Analysis & Rule
High CVE-2025-15100 in Jay Login Register (CVSS 8.8): JAY Login & Register. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.6.04.
March 18, 2026
CVE-2026-0632: Fluent Forms Pro Add On Pack <= 6.1.12 Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource' PoC, Patch Analysis & Rule
Medium CVE-2026-0632 in Fluentformpro (CVSS 5.4): Fluent Forms Pro Add On Pack. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-15476: The Bucketlister <= 0.1.5 Missing Authorization to Authenticated (Subscriber+) Bucket List Modification PoC, Patch Analysis & Rule
Medium CVE-2025-15476 in The Bucketlister (CVSS 4.3): The Bucketlister. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1608: Video Onclick <= 0.4.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-1608 in Video Onclick (CVSS 6.4): Video Onclick. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-0555: Premmerce <= 1.3.20 Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint PoC, Patch Analysis & Rule
Medium CVE-2026-0555 in Premmerce (CVSS 6.4): Premmerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.21.
March 18, 2026
CVE-2025-15477: The Bucketlister <= 0.1.5 Authenticated (Contributor+) SQL Injection via `category` and `id` Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2025-15477 in The Bucketlister (CVSS 6.5): The Bucketlister. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2026-1570: Simple Bible Verse via Shortcode <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-1570 in Simple Bible Verse Via Shortcode (CVSS 6.4): Simple Bible Verse via Shortcode. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1611: Wikiloops Track Player <= 1.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-1611 in Wikiloops Track Player (CVSS 6.4): Wikiloops Track Player. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1634: Subitem AL Slider <= 1.0.0 Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] PoC, Patch Analysis & Rule
Medium CVE-2026-1634 in Subitem Al Slider (CVSS 6.1): Subitem AL Slider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1573: OMIGO <= 3.3 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-1573 in Omigo (CVSS 6.4): OMIGO. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1643: MP-Ukagaka <= 1.5.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-1643 in Mp Ukagaka (CVSS 6.1): MP-Ukagaka. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.