AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-24998: Hustle <= 7.8.9.2 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-24998 in Wordpress Popup (CVSS 5.3): Hustle. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 7.8.9.3.
March 18, 2026
CVE-2026-25432: Omnipress <= 1.6.7 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25432 in Omnipress (CVSS 6.4): Omnipress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24534: Booter <= 1.5.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24534 in Booter Bots Crawlers Manager (CVSS 4.3): Booter. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.5.8.
March 18, 2026
CVE-2026-24532: SiteLock Security <= 5.0.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24532 in Sitelock (CVSS 4.3): SiteLock Security. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.0.3.
March 18, 2026
CVE-2025-6461: CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php PoC, Patch Analysis & Rule
Medium CVE-2025-6461 in Cubewp Framework (CVSS 4.3): CubeWP – All-in-One Dynamic Content Framework. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.28.
March 18, 2026
CVE-2026-24535: Automatic Featured Images from Videos <= 1.2.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24535 in Automatic Featured Images From Videos (CVSS 4.3): Automatic Featured Images from Videos. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.8.
March 18, 2026
CVE-2026-0593: WP Go Maps (formerly WP Google Maps) <= 10.0.04 Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification PoC, Patch Analysis & Rule
Medium CVE-2026-0593 in Wp Google Maps (CVSS 5.3): WP Go Maps (formerly WP Google Maps). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 10.0.05.
March 18, 2026
CVE-2026-25012: Bannerize Pro <= 1.11.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25012 in Wp Bannerize Pro (CVSS 5.3): Bannerize Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.11.1.
March 18, 2026
CVE-2026-24996: WPElemento Importer <= 0.6.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24996 in Wpelemento Importer (CVSS 4.3): WPElemento Importer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.6.5.
March 18, 2026
CVE-2026-0862: Save as PDF Plugin by PDFCrowd <= 4.5.5 Reflected Cross-Site Scripting via options PoC, Patch Analysis & Rule
Medium CVE-2026-0862 in Save As Pdf By Pdfcrowd (CVSS 6.1): Save as PDF Plugin by PDFCrowd. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24543: Materialis Companion <= 1.3.52 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24543 in Materialis Companion (CVSS 4.3): Materialis Companion. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24538: Omnipress <= 1.6.7 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-24538 in Omnipress (CVSS 7.5): Omnipress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24379: Job Portal <= 2.4.3 Authenticated (Subscriber+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-24379 in Wp Job Portal (CVSS 4.3): Job Portal. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.4.
March 18, 2026
CVE-2026-24540: Integrate Google Drive <= 1.5.6 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24540 in Integrate Google Drive (CVSS 4.3): Integrate Google Drive. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24544: HD Quiz <= 2.0.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24544 in Hd Quiz (CVSS 4.3): HD Quiz. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.10.
March 18, 2026
CVE-2026-24542: Term Order <= 2.1.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-24542 in Wp Term Order (CVSS 4.3): Term Order. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24997: Wired Impact Volunteer Management <= 2.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24997 in Wired Impact Volunteer Management (CVSS 5.3): Wired Impact Volunteer Management. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.8.1.
March 18, 2026
CVE-2026-24995: Latest Post Shortcode <= 14.2.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24995 in Latest Post Shortcode (CVSS 4.3): Latest Post Shortcode. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 14.2.1.
March 18, 2026
CVE-2026-24390: Kentha Elementor Widgets < 3.1 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-24390 in Kentha Elementor (CVSS 7.5): Kentha Elementor Widgets < 3.1 - Authenticated (Contributor+) Local File Inclusion. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24541: Download After Email <= 2.1.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24541 in Download After Email (CVSS 5.3): Download After Email. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.