AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-27388: DesignThemes Booking Manager <= 2.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-27388 in Designthemes Booking Manager (CVSS 5.3): DesignThemes Booking Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-2385: The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 Unauthenticated Email Relay PoC, Patch Analysis & Rule
Medium CVE-2026-2385 in The Plus Addons For Elementor Page Builder (CVSS 5.3): The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce. Atomic Edge summarizes impact, exploitability, and...
March 18, 2026
CVE-2026-27386: DesignThemes Directory Addon <= 1.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-27386 in Designthemes Directory Addon (CVSS 5.3): DesignThemes Directory Addon. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14339: weMail <= 2.0.7 Missing Authorization to Unauthenticated Form Deletion PoC, Patch Analysis & Rule
Medium CVE-2025-14339 in Wemail (CVSS 6.5): weMail. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.8.
March 18, 2026
CVE-2026-25388: Ads Pro <= 5.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25388 in Ap Plugin Scripteo (CVSS 4.3): Ads Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-27542: Woocommerce Wholesale Lead Capture <= 2.0.3.1 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2026-27542 in Woocommerce Wholesale Lead Capture (CVSS 9.8): Woocommerce Wholesale Lead Capture. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-27540: Woocommerce Wholesale Lead Capture <= 2.0.3.1 Unauthenticated Arbitrary File Upload PoC, Patch Analysis & Rule
Critical CVE-2026-27540 in Woocommerce Wholesale Lead Capture (CVSS 9.8): Woocommerce Wholesale Lead Capture. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-25386: Ally <= 4.0.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25386 in Pojo Accessibility (CVSS 5.3): Ally. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.3.
March 18, 2026
CVE-2026-2384: Quiz Maker <= 6.7.1.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-2384 in Quiz Maker (CVSS 6.4): Quiz Maker. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.7.1.8.
March 18, 2026
CVE-2026-2486: Master Addons For Elementor <= 2.1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' PoC, Patch Analysis & Rule
Medium CVE-2026-2486 in Master Addons (CVSS 6.4): Master Addons For Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.1.2.
March 18, 2026
CVE-2026-27541: Wholesale Suite <= 2.2.6 Authenticated (Shop Manager) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-27541 in Woocommerce Wholesale Prices (CVSS 7.2): Wholesale Suite. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.2.7.
March 18, 2026
CVE-2026-25389: EventPrime <= 4.2.8.3 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-25389 in Eventprime Event Calendar Management (CVSS 5.3): EventPrime. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.8.4.
March 18, 2026
CVE-2026-25387: Image Optimizer by Elementor <= 1.7.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25387 in Image Optimization (CVSS 4.3): Image Optimizer by Elementor. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.7.2.
March 18, 2026
CVE-2026-25378: Nelio AB Testing <= 8.2.4 Authenticated (Editor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-25378 in Nelio Ab Testing (CVSS 4.9): Nelio AB Testing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.2.5.
March 18, 2026
CVE-2026-25384: WP-Lister Lite for eBay <= 3.8.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25384 in Wp Lister For Ebay (CVSS 5.3): WP-Lister Lite for eBay. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-25385: URL Shortify <= 1.12.3 Authenticated (Author+) Server-Side Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-25385 in Url Shortify (CVSS 6.4): URL Shortify. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.12.4.
March 18, 2026
CVE-2026-2718: Dealia <= 1.0.8 Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-2718 in Dealia Request A Quote (CVSS 6.4): Dealia. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-2716: Client Testimonial Slider <= 2.0 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Testimonial Heading' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-2716 in Wp Client Testimonial (CVSS 4.4): Client Testimonial Slider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1994: s2Member <= 260127 Unauthenticated Privilege Escalation via Account Takeover PoC, Patch Analysis & Rule
Critical CVE-2026-1994 in S2member (CVSS 9.8): s2Member. Atomic Edge summarizes impact, exploitability, and patch details. Update to 260215.
March 18, 2026
CVE-2025-14452: WP Customer Reviews <= 3.7.5 Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter PoC, Patch Analysis & Rule
High CVE-2025-14452 in Wp Customer Reviews (CVSS 7.2): WP Customer Reviews. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.7.6.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.