AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-69366: Emerce Core <= 1.8 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2025-69366 in Emerce Core (CVSS 7.5): Emerce Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1280: Frontend File Manager Plugin <= 23.5 Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter PoC, Patch Analysis & Rule
High CVE-2026-1280 in Nmedia User File Uploader (CVSS 7.5): Frontend File Manager Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 23.6.
March 18, 2026
CVE-2026-25409: JAMstack Deployments <= 1.1.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25409 in Wp Jamstack Deployments (CVSS 4.3): JAMstack Deployments. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1380: Bitcoin Donate Button <= 1.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1380 in Bitcoin Donate Button (CVSS 4.3): Bitcoin Donate Button. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1391: Vzaar Media Management <= 1.2 Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] PoC, Patch Analysis & Rule
Medium CVE-2026-1391 in Vzaar Media Management (CVSS 5.3): Vzaar Media Management. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-0844: Simple User Registration <= 6.7 Authenticated (Subscriber+) Privilege Escalation via profile_save_field PoC, Patch Analysis & Rule
High CVE-2026-0844 in Wp Registration (CVSS 8.8): Simple User Registration. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.8.
March 18, 2026
CVE-2025-14616: Recooty <= 1.0.6 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2025-14616 in Recooty (CVSS 4.3): Recooty. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1377: imwptip <= 1.1 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1377 in Imwptip (CVSS 4.3): imwptip. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1398: Change WP URL <= 1.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1398 in Change Wp Url (CVSS 4.3): Change WP URL. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-15511: Rupantorpay <= 2.0.0 Missing Authorization to Unauthenticated Order Status Modification PoC, Patch Analysis & Rule
Medium CVE-2025-15511 in Rupantorpay (CVSS 5.3): Rupantorpay. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1399: WP Google Ad Manager Plugin <= 1.1.0 Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings PoC, Patch Analysis & Rule
Medium CVE-2026-1399 in Wp Google Ad Manager Plugin (CVSS 4.4): WP Google Ad Manager Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14063: SEO Links Interlinking <= 1.7.9.9.1 Reflected Cross-Site Scripting via 'google_error' Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-14063 in Seo Links Interlinking (CVSS 6.1): SEO Links Interlinking. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.7.9.9.2.
March 18, 2026
CVE-2025-14283: BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.14 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-14283 in Blockart Blocks (CVSS 6.4): BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections &.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
March 18, 2026
CVE-2026-1381: Order Minimum/Maximum Amount Limits for WooCommerce <= 4.6.8 Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields PoC, Patch Analysis & Rule
Medium CVE-2026-1381 in Order Minimum Amount For Woocommerce (CVSS 4.4): Order Minimum/Maximum Amount Limits for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.6.9.
March 18, 2026
CVE-2026-1389: Document Embedder <= 2.0.4 Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-1389 in Document Emberdder (CVSS 5.3): Document Embedder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.5.
March 18, 2026
CVE-2026-1053: Ivory Search <= 5.5.13 Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters PoC, Patch Analysis & Rule
Medium CVE-2026-1053 in Add Search To Menu (CVSS 4.4): Ivory Search. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.5.14.
March 18, 2026
CVE-2025-14386: Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization 2.4.4 2.5.12 Missing Authorization to Authenticated (Subscriber+) Authentication Bypass via Account Takeover PoC, Patch Analysis & Rule
High CVE-2025-14386 in Metasync (CVSS 8.8): Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage...
March 18, 2026
CVE-2026-1054: RegistrationMagic <= 6.0.7.4 Missing Authorization to Unauthenticated Arbitrary Settings Modification PoC, Patch Analysis & Rule
Medium CVE-2026-1054 in Custom Registration Form Builder With Submission Manager (CVSS 5.3): RegistrationMagic. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.0.7.5.
March 18, 2026
CVE-2026-1310: Simple calendar for Elementor <= 1.6.6 Missing Authorization to Unauthenticated Arbitrary Calendar Entry Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-1310 in Simple Calendar For Elementor (CVSS 5.3): Simple calendar for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.7.
March 18, 2026
CVE-2025-12709: Interactions – Create Interactive Experiences in the Block Editor <= 1.3.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-12709 in Interactions (CVSS 6.4): Interactions – Create Interactive Experiences in the Block Editor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.2.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.