AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-0825: Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export PoC, Patch Analysis & Rule
Medium CVE-2026-0825 in Contact Form Entries (CVSS 5.3): Database for Contact Form 7, WPforms, Elementor forms. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.4.6.
March 18, 2026
CVE-2026-1400: AI Engine <= 3.3.2 Authenticated (Editor+) Arbitrary File Upload via 'filename' Parameter in update_media_metadata Endpoint PoC, Patch Analysis & Rule
High CVE-2026-1400 in Ai Engine (CVSS 7.2): AI Engine. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.3.3.
March 18, 2026
CVE-2025-9082: WPBITS Addons For Elementor <= 1.8 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-9082 in Wpbits Addons For Elementor (CVSS 6.4): WPBITS Addons For Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.1.
March 18, 2026
CVE-2026-1083: Appointment Hour Booking – Booking Calendar <= 1.5.60 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration PoC, Patch Analysis & Rule
Medium CVE-2026-1083 in Appointment Hour Booking (CVSS 4.4): Appointment Hour Booking – Booking Calendar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.5.61.
March 18, 2026
CVE-2026-0832: New User Approve <= 3.2.2 Missing Authorization to Unauthenticated Arbitrary User Approval, Denial, and Information Disclosure PoC, Patch Analysis & Rule
High CVE-2026-0832 in New User Approve (CVSS 7.3): New User Approve. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.2.3.
March 18, 2026
CVE-2026-1244: Forms Bridge <= 4.2.5 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1244 in Forms Bridge (CVSS 6.4): Forms Bridge. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.3.0.
March 18, 2026
CVE-2025-8072: Target Video Easy Publish <= 3.8.8 Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-8072 in Brid Video Easy Publish (CVSS 6.4): Target Video Easy Publish. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.8.9.
March 18, 2026
CVE-2026-1298: Easy Replace Image <= 3.5.2 Missing Authorization to Authenticated (Contributor+) Arbitrary Attachment Replacement PoC, Patch Analysis & Rule
Medium CVE-2026-1298 in Easy Replace Image (CVSS 5.3): Easy Replace Image. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.3.
March 18, 2026
CVE-2025-14610: TableMaster for Elementor <= 1.3.6 Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter PoC, Patch Analysis & Rule
High CVE-2025-14610 in Tablemaster For Elementor (CVSS 7.2): TableMaster for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.8.
March 18, 2026
CVE-2025-69304: Allmart <= 1.1 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2025-69304 in Allmart Core (CVSS 7.5): Allmart. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14865: Passster – Password Protect Pages and Content <= 4.2.24 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2025-14865 in Content Protector (CVSS 6.4): Passster – Password Protect Pages and Content. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.25.
March 18, 2026
CVE-2025-67973: Sunshine Photo Cart <= 3.5.6.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67973 in Sunshine Photo Cart (CVSS 5.3): Sunshine Photo Cart. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.7.1.
March 18, 2026
CVE-2026-0746: AI Engine <= 3.3.2 Authenticated (Subscriber+) Server-Side Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-0746 in Ai Engine (CVSS 6.4): AI Engine. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.3.3.
March 18, 2026
CVE-2025-68048: NextMove Lite <= 2.23.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68048 in Woo Thank You Page Nextmove Lite (CVSS 5.3): NextMove Lite. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.24.0.
March 18, 2026
CVE-2025-68069: Directorist <= 8.5.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68069 in Directorist (CVSS 4.3): Directorist. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.5.9.
March 18, 2026
CVE-2025-68021: ConveyThis <= 269.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68021 in Conveythis Translate (CVSS 5.3): ConveyThis. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14795: Stop Spammers Classic <= 2026.1 Cross-Site Request Forgery via Email Allowlist PoC, Patch Analysis & Rule
Medium CVE-2025-14795 in Stop Spammer Registrations Plugin (CVSS 4.3): Stop Spammers Classic. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69323: Slimstat Analytics <= 5.3.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69323 in Wp Slimstat (CVSS 6.1): Slimstat Analytics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.3.3.
March 18, 2026
CVE-2025-68842: Widget Logic Visual <= 1.52 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68842 in Widget Logic Visual (CVSS 6.1): Widget Logic Visual. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69302: DesignThemes Core Features <= 2.3 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69302 in Designthemes Core Features (CVSS 6.1): DesignThemes Core Features. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.