AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-67975: aDirectory <= 3.0.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67975 in Adirectory (CVSS 4.3): aDirectory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.0.4.
March 18, 2026
CVE-2025-69297: Aardvark <= 2.19 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69297 in Aardvark Plugin (CVSS 5.3): Aardvark. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67974: WPLegalPages <= 3.5.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67974 in Wplegalpages (CVSS 5.3): WPLegalPages. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.5.
March 18, 2026
CVE-2025-68880: Simple Archive Generator <= 5.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68880 in Simple Archive Generator (CVSS 6.1): Simple Archive Generator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68845: eDS Responsive Menu <= 1.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68845 in Eds Responsive Menu (CVSS 6.1): eDS Responsive Menu. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2025-68895: AhaChat Messenger Marketing <= 1.1 Authentication Bypass PoC, Patch Analysis & Rule
Medium CVE-2025-68895 in Ahachat Messenger Marketing (CVSS 5.3): AhaChat Messenger Marketing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68844: Membee Login <= 2.3.6 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-68844 in Membees Member Login Widget (CVSS 7.2): Membee Login. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.7.
March 18, 2026
CVE-2026-1056: Snow Monkey Forms <= 12.0.3 Unauthenticated Arbitrary File Deletion via Path Traversal PoC, Patch Analysis & Rule
Critical CVE-2026-1056 in Snow Monkey Forms (CVSS 9.8): Snow Monkey Forms. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 12.0.4.
March 18, 2026
CVE-2025-14316: AhaChat Messenger Marketing <= 1.1 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-14316 in Ahachat Messenger Marketing (CVSS 7.2): AhaChat Messenger Marketing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67977: HAPPY <= 1.0.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67977 in Happy Helpdesk Support Ticket System (CVSS 5.3): HAPPY. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1060: WP Adminify <= 4.0.7.7 Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API PoC, Patch Analysis & Rule
Medium CVE-2026-1060 in Adminify (CVSS 5.3): WP Adminify. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.7.8.
March 18, 2026
CVE-2025-68855: JobBoard Job listing <= 1.2.8 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-68855 in Job Board Light (CVSS 5.3): JobBoard Job listing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68843: FeedWordPress Advanced Filters <= 0.6.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68843 in Faf (CVSS 6.1): FeedWordPress Advanced Filters. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.61.
March 18, 2026
CVE-2025-68856: Mopinion Feedback Form <= 1.1.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68856 in Mopinion Feedback Form (CVSS 6.1): Mopinion Feedback Form. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68847: iSape <= 0.72 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68847 in Isape (CVSS 6.1): iSape. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14039: Simple Folio <= 1.1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields PoC, Patch Analysis & Rule
Medium CVE-2025-14039 in Simple Folio (CVSS 6.4): Simple Folio. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.2.
March 18, 2026
CVE-2026-1295: Buy Now Plus <= 1.0.2 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1295 in Buy Now Plus (CVSS 6.4): Buy Now Plus. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.3.
March 18, 2026
CVE-2025-68531: ModelTheme Addons for WPBakery and Elementor < 1.5.6 Authenticated (Contributor+) PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2025-68531 in Modeltheme Addons For Wpbakery (CVSS 7.5): ModelTheme Addons for WPBakery and Elementor < 1.5.6 - Authenticated (Contributor+) PHP Object Injection. Atomic Edge summarizes impact, exploitability, and patch...
March 18, 2026
CVE-2025-69305: Crete Core <= 1.4.3 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2025-69305 in Crete Core (CVSS 7.5): Crete Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-0702: VidShop – Shoppable Videos for WooCommerce <= 1.1.4 Unauthenticated Time-Based SQL Injection via 'fields' PoC, Patch Analysis & Rule
High CVE-2026-0702 in Vidshop For Woocommerce (CVSS 7.5): VidShop – Shoppable Videos for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.5.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.