AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-1558: WP Recipe Maker <= 10.3.2 Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-1558 in Wp Recipe Maker (CVSS 5.3): WP Recipe Maker. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 10.3.3.
March 18, 2026
CVE-2025-14142: Electric Enquiries <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2025-14142 in Electric Enquiries (CVSS 6.4): Electric Enquiries. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-2383: Simple Download Monitor <= 4.0.5 Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field PoC, Patch Analysis & Rule
Medium CVE-2026-2383 in Simple Download Monitor (CVSS 6.4): Simple Download Monitor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.6.
March 18, 2026
CVE-2026-2428: Fluent Forms Pro Add On Pack <= 6.1.17 Missing Authorization to Unauthenticated Payment Status modification PoC, Patch Analysis & Rule
High CVE-2026-2428 in Fluentformpro (CVSS 7.5): Fluent Forms Pro Add On Pack. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28122: ListingPro Plugin <= 2.9.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-28122 in Listingpro Plugin (CVSS 6.1): ListingPro Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14149: Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link PoC, Patch Analysis & Rule
Medium CVE-2025-14149 in Xpro Elementor Addons (CVSS 6.4): Xpro Addons — 140+ Widgets for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2024-10938: OVRI Payment 1.7.0 Malicious .htaccess directive PoC, Patch Analysis & Rule
Medium CVE-2024-10938 in Moneytigo (CVSS 6.5): OVRI Payment 1.7.0 - Malicious .htaccess directive. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2026-28134: JetEngine <= 3.7.2 Authenticated (Contributor+) Remote Code Execution PoC, Patch Analysis & Rule
High CVE-2026-28134 in Jet Engine (CVSS 8.8): JetEngine. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28133: Filr – Secure document library <= 1.2.13 Authenticated (Contributor+) Arbitrary File Uploads PoC, Patch Analysis & Rule
High CVE-2026-28133 in Filr Protection (CVSS 8.8): Filr – Secure document library. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.14.
March 18, 2026
CVE-2026-28135: Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-28135 in Royal Elementor Addons (CVSS 5.3): Royal Addons for Elementor – Addons and Templates Kit for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.1050.
March 18, 2026
CVE-2026-28078: Directory Listings WordPress plugin – uListing <= 2.2.0 Authenticated (Editor+) Arbitrary File Download PoC, Patch Analysis & Rule
Medium CVE-2026-28078 in Ulisting (CVSS 4.9): Directory Listings WordPress plugin – uListing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28112: AllInOne Banner Rotator <= 3.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-28112 in All In One BannerRotator (CVSS 6.1): AllInOne - Banner Rotator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28115: WP Attractive Donations System Easy Stripe & Paypal donations <= 1.25 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-28115 in WP_AttractiveDonationsSystem (CVSS 7.5): WP Attractive Donations System - Easy Stripe & Paypal donations. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28108: LambertGroup AllInOne Banner with Thumbnails <= 3.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-28108 in All In One ThumbnailsBanner (CVSS 6.1): LambertGroup - AllInOne - Banner with Thumbnails. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28113: Ultimate Learning Pro <= 3.9.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-28113 in Indeed Learning Pro (CVSS 6.1): Ultimate Learning Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28127: Lawyer Directory <= 1.3.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-28127 in Lawyer Directory (CVSS 7.2): Lawyer Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28109: LambertGroup AllInOne Content Slider <= 3.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-28109 in All In One ContentSlider (CVSS 6.1): LambertGroup - AllInOne - Content Slider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28110: LambertGroup AllInOne Banner with Playlist <= 3.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-28110 in All In One BannerWithPlaylist (CVSS 6.1): LambertGroup - AllInOne - Banner with Playlist. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28104: Site Suggest <= 1.3.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-28104 in Site Suggest (CVSS 5.3): Site Suggest. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-28103: Responsive Zoom In/Out Slider WordPress Plugin <= 5.4.5 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-28103 in Lbg_zoominoutslider (CVSS 6.1): Responsive Zoom In/Out Slider WordPress Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.