Atomic Edge Product

AI-Powered CVE Analysis for WordPress Plugins

We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.

WordPress Proof of Concepts

AI-assisted vulnerability analysis with PoC demonstration

2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (wp-responsive-recent-post-slider)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (sp-faq)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (wp-blog-and-widgets)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (wp-trending-post-slider-and-widget)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (countdown-timer-ultimate)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (wp-featured-content-and-slider)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (wp-team-showcase-and-slider)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (ticker-ultimate)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-09

CVE-2026-6443: Essentialplugin Plugins (Various Versions) – Injected Backdoor (post-grid-and-filter-ultimate)

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam…
2026-04-08

CVE-2026-5711: Post Blocks & Tools <= 1.3.0 – Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute (bnm-blocks)

The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with author-level access and…

How Atomic Edge Works

Simple Setup. Powerful Security.

Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.

See How It Works