AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-1088: Login Page Editor <= 1.2 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1088 in Login Page Editor (CVSS 4.3): Login Page Editor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1095: Canto Testimonials <= 1.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'fx' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1095 in Canto Testimonials (CVSS 6.4): Canto Testimonials. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-13676: JustClick registration plugin <= 0.1 Reflected Cross-Site Scripting via PHP_SELF PoC, Patch Analysis & Rule
Medium CVE-2025-13676 in Justclick Subscriber (CVSS 6.1): JustClick registration plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-0806: WP-ClanWars <= 2.0.1 Authenticated (Administrator+) SQL Injection via 'orderby' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-0806 in Wp Clanwars (CVSS 4.9): WP-ClanWars. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14843: Wizit Gateway for WooCommerce <= 1.2.9 Missing Authentication to Unauthenticated Arbitrary Order Cancellation PoC, Patch Analysis & Rule
Medium CVE-2025-14843 in Wizit Gateway For Woocommerce (CVSS 5.3): Wizit Gateway for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.0.
March 18, 2026
CVE-2026-1097: ThemeRuby Multi Authors <= 1.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1097 in Themeruby Multi Authors (CVSS 6.4): ThemeRuby Multi Authors. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14941: GZSEO <= 2.0.11 Authenticated (Contributor+) Authorization Bypass to Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-14941 in Gzseo (CVSS 6.4): GZSEO. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.12.
March 18, 2026
CVE-2026-1081: Set Bulk Post Categories <= 1.1 Cross-Site Request Forgery to Bulk Post Category Update PoC, Patch Analysis & Rule
Medium CVE-2026-1081 in Set Bulk Post Categories (CVSS 4.3): Set Bulk Post Categories. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1070: Alex User Counter <= 6.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1070 in User Counter (CVSS 4.3): Alex User Counter. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14985: Alpha Blocks <= 1.5.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'alpha_block_css' Post Meta PoC, Patch Analysis & Rule
Medium CVE-2025-14985 in Alpha Blocks (CVSS 6.4): Alpha Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1076: Star Review Manager <= 1.2.2 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1076 in Star Review Manager (CVSS 4.3): Star Review Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1099: Administrative Shortcodes <= 0.3.4 Authenticated (Contributor+) Stored Cross-Site Scripting via 'login' and 'logout' Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1099 in Administrative Shortcodes (CVSS 6.4): Administrative Shortcodes. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1257: Administrative Shortcodes <= 0.3.4 Authenticated (Contributor+) Local File Inclusion via 'slug' Shortcode Attribute PoC, Patch Analysis & Rule
High CVE-2026-1257 in Administrative Shortcodes (CVSS 7.5): Administrative Shortcodes. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1075: ZT Captcha <= 1.0.4 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1075 in Zt Captcha (CVSS 4.3): ZT Captcha. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1103: AIKTP <= 5.0.04 Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions PoC, Patch Analysis & Rule
Medium CVE-2026-1103 in Aiktp (CVSS 5.4): AIKTP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.0.5.
March 18, 2026
CVE-2026-1084: Cookie consent for developers <= 1.7.1 Authenticated (Administrator+) Stored Cross-Site Scripting via Multiple Settings Fields PoC, Patch Analysis & Rule
Medium CVE-2026-1084 in Cookie Consent For Developers (CVSS 4.4): Cookie consent for developers. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-0807: Frontis Blocks <= 1.1.6 Unauthenticated Server-Side Request Forgery via 'url' Parameter PoC, Patch Analysis & Rule
High CVE-2026-0807 in Frontis Blocks (CVSS 7.2): Frontis Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.7.
March 18, 2026
CVE-2025-14609: Wise Analytics <= 1.1.9 Missing Authorization to Unauthenticated Arbitrary Analytics Database Disclosure via 'name' Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-14609 in Wise Analytics (CVSS 5.3): Wise Analytics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.20.
March 18, 2026
CVE-2025-14906: WP Youtube Video Gallery <= 1.0 Cross-Site Request Forgery to Plugin Settings Update PoC, Patch Analysis & Rule
Medium CVE-2025-14906 in Wp Youtube Video Gallery (CVSS 4.3): WP Youtube Video Gallery. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2025-14797: Same Category Posts <= 1.1.19 Authenticated (Author+) Stored Cross-Site Scripting via Widget Title Placeholder PoC, Patch Analysis & Rule
Medium CVE-2025-14797 in Same Category Posts (CVSS 5.4): Same Category Posts. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.20.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.