AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-1165: Popup Box <= 6.1.1 Cross-Site Request Forgery to Popup Status Change PoC, Patch Analysis & Rule
Medium CVE-2026-1165 in Ays Popup Box (CVSS 4.3): Popup Box. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.1.2.
March 18, 2026
CVE-2026-25022: KiviCare <= 3.6.16 Authenticated (Receptionist+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-25022 in Kivicare Clinic Management System (CVSS 6.5): KiviCare. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.0.
March 18, 2026
CVE-2026-25019: Atarim <= 4.3.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25019 in Atarim Visual Collaboration (CVSS 5.3): Atarim. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.3.2.
March 18, 2026
CVE-2026-1431: Booking Calendar <= 10.14.13 Missing Authorization to Unauthenticated Booking Details Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-1431 in Booking (CVSS 5.3): Booking Calendar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 10.14.14.
March 18, 2026
CVE-2026-0683: SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 Authenticated (Subscriber+) SQL Injection via Number Field Filter PoC, Patch Analysis & Rule
Medium CVE-2026-0683 in Supportcandy (CVSS 6.5): SupportCandy – Helpdesk & Customer Support Ticket System. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.4.5.
March 18, 2026
CVE-2026-25399: Serious Slider <= 1.2.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25399 in Cryout Serious Slider (CVSS 4.3): Serious Slider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.0.
March 18, 2026
CVE-2025-14554: Sell BTC Cryptocurrency Selling Calculator <= 1.5 Unauthenticated Stored Cross-Site Scripting via 'orderform_data' AJAX Action PoC, Patch Analysis & Rule
High CVE-2025-14554 in Sell Btc By Hayyatapps (CVSS 7.2): Sell BTC - Cryptocurrency Selling Calculator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.
March 18, 2026
CVE-2026-25391: WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek <= 1.3.07 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25391 in Ai Content Generation (CVSS 4.3): WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek. Atomic Edge summarizes impact, exploitability, and patch details, with WAF...
March 18, 2026
CVE-2025-68042: Travelpayouts <= 1.2.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68042 in Travelpayouts (CVSS 4.3): Travelpayouts. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.2.
March 18, 2026
CVE-2026-25021: Mizan Demo Importer <= 0.1.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25021 in Mizan Demo Importer (CVSS 4.3): Mizan Demo Importer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.1.4.
March 18, 2026
CVE-2026-25020: WP Sync for Notion <= 1.7.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25020 in Wp Sync For Notion (CVSS 4.3): WP Sync for Notion. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24383: B Slider <= 2.0.6 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24383 in B Slider (CVSS 6.4): B Slider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.7.
March 18, 2026
CVE-2026-25408: Broken Link Notifier <= 1.3.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25408 in Broken Link Notifier (CVSS 5.3): Broken Link Notifier. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.6.
March 18, 2026
CVE-2026-25016: Nelio Popups <= 1.3.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25016 in Nelio Popups (CVSS 4.3): Nelio Popups. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.6.
March 18, 2026
CVE-2025-68005: Easy Hotel Booking <= 1.8.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68005 in Easy Hotel (CVSS 4.3): Easy Hotel Booking. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.5.
March 18, 2026
CVE-2026-25407: Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode <= 4.6.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25407 in Cookiebot (CVSS 4.3): Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update...
March 18, 2026
CVE-2025-68051: Shiprocket <= 2.0.8 Authenticated (Subscriber+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2025-68051 in Shiprocket (CVSS 4.3): Shiprocket. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22341: Booked <= 3.0.0 Authentication Bypass PoC, Patch Analysis & Rule
Critical CVE-2026-22341 in Booked (CVSS 9.8): Booked. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-25418: Bit Form <= 2.21.10 Authenticated (Administrator+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-25418 in Bit Form (CVSS 4.9): Bit Form. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67978: Educare <= 1.6.1 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-67978 in Educare (CVSS 7.2): Educare. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.2.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.