AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-1082: TITLE ANIMATOR <= 1.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1082 in Title Animator (CVSS 4.3): TITLE ANIMATOR. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1675: Advanced Country Blocker <= 2.3.1 Unauthenticated Authorization Bypass via Insecure Default Secret Key PoC, Patch Analysis & Rule
Medium CVE-2026-1675 in Advanced Country Blocker (CVSS 5.3): Advanced Country Blocker. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.2.
March 18, 2026
CVE-2025-13463: Bold Page Builder <= 5.5.3 Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid PoC, Patch Analysis & Rule
Medium CVE-2025-13463 in Bold Page Builder (CVSS 6.4): Bold Page Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1613: Wonka Slide <= 1.3.3 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-1613 in Wonka Slide (CVSS 6.4): Wonka Slide. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-12159: Bold Page Builder <= 5.4.8 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2025-12159 in Bold Page Builder (CVSS 6.4): Bold Page Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24951: myCred <= 2.9.7.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24951 in Mycred (CVSS 4.3): myCred. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.9.7.4.
March 18, 2026
CVE-2025-12803: Bold Builder <= 5.5.1 Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode PoC, Patch Analysis & Rule
Medium CVE-2025-12803 in Bold Page Builder (CVSS 6.4): Bold Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-15267: Bold Page Builder <= 5.5.7 Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode PoC, Patch Analysis & Rule
Medium CVE-2025-15267 in Bold Page Builder (CVSS 6.4): Bold Page Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1499: WP Duplicate <= 1.1.8 Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action PoC, Patch Analysis & Rule
Critical CVE-2026-1499 in Local Sync (CVSS 9.8): WP Duplicate. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.9.
March 18, 2026
CVE-2026-1252: Events Listing Widget <= 1.3.4 Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field PoC, Patch Analysis & Rule
Medium CVE-2026-1252 in Events Listing Widget (CVSS 6.4): Events Listing Widget. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.5.
March 18, 2026
CVE-2026-1785: Code Snippets <= 3.9.4 Cross-Site Request Forgery to Cloud Snippet Download/Update Actions PoC, Patch Analysis & Rule
Medium CVE-2026-1785 in Code Snippets (CVSS 4.3): Code Snippets. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.9.5.
March 18, 2026
CVE-2026-1293: Yoast SEO <= 26.8 Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1293 in Wordpress Seo (CVSS 6.4): Yoast SEO. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 26.9.
March 18, 2026
CVE-2025-10753: OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-10753 in Miniorange Login With Eve Online Google Facebook (CVSS 5.3): OAuth Single Sign On – SSO (OAuth Client). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.26.15.
March 18, 2026
CVE-2026-1888: Docus <= 1.0.6 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1888 in Docus (CVSS 6.4): Docus. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.7.
March 18, 2026
CVE-2026-1808: Orange Confort+ accessibility toolbar for WordPress <= 0.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1808 in Orange Confort Plus (CVSS 6.4): Orange Confort+ accessibility toolbar for WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.7.1.
March 18, 2026
CVE-2026-1279: Employee Directory <= 1.2.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1279 in Employee Staff Directory (CVSS 6.4): Employee Directory. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.2.2.
March 18, 2026
CVE-2026-1909: WaveSurfer-WP <= 2.8.3 Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1909 in Wavesurfer Wp (CVSS 6.4): WaveSurfer-WP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.8.4.
March 18, 2026
CVE-2025-69374: Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2025-69374 in Ele Blog (CVSS 8.1): Eleblog – Elementor Blog And Magazine Addons. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1228: Timeline Block <= 1.3.3 Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1228 in Timeline Block Block (CVSS 4.3): Timeline Block. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.4.
March 18, 2026
CVE-2025-68028: GA4WP: Google Analytics for WordPress <= 2.10.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68028 in Ga For Wp (CVSS 5.3): GA4WP: Google Analytics for WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.