AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-1844: PixelYourSite PRO <= 12.4.0.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-1844 in Pixelyoursite Pro (CVSS 7.2): PixelYourSite PRO. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14608: WP Last Modified Info <= 1.9.5 Insecure Direct Object Reference to Authenticated (Author+) Post Metadata Modification PoC, Patch Analysis & Rule
Medium CVE-2025-14608 in Wp Last Modified Info (CVSS 5.3): WP Last Modified Info. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.9.6.
March 18, 2026
CVE-2026-1841: PixelYourSite <= 11.2.0 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-1841 in Pixelyoursite (CVSS 7.2): PixelYourSite. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 11.2.0.1.
March 18, 2026
CVE-2026-1320: Secure Copy Content Protection and Content Locking <= 4.9.8 Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header PoC, Patch Analysis & Rule
High CVE-2026-1320 in Secure Copy Content Protection (CVSS 7.2): Secure Copy Content Protection and Content Locking. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.9.9.
March 18, 2026
CVE-2026-1316: Customer Reviews for WooCommerce <= 5.97.0 Unauthenticated Stored Cross-Site Scripting via media[].href Parameter PoC, Patch Analysis & Rule
High CVE-2026-1316 in Customer Reviews Woocommerce (CVSS 7.2): Customer Reviews for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.98.0.
March 18, 2026
CVE-2026-1671: Activity Log for WordPress <= 1.2.8 Missing Authorization to Sensitive Information Exposure via Log File PoC, Patch Analysis & Rule
Medium CVE-2026-1671 in Winterlock (CVSS 6.5): Activity Log for WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1356: Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 Unauthenticated Server-Side Request Forgery via src PoC, Patch Analysis & Rule
Medium CVE-2026-1356 in Webp Converter For Media (CVSS 4.8): Converter for Media – Optimize images | Convert WebP & AVIF. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69394: Cnvrse <= 026.02.10.20 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2025-69394 in Cnvrse (CVSS 5.3): Cnvrse. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1537: LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 Missing Authorization to Booking Details Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-1537 in Latepoint (CVSS 5.3): LatePoint – Calendar Booking Plugin for Appointments and Events. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.2.7.
March 18, 2026
CVE-2026-25036: Passster <= 4.2.25 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25036 in Content Protector (CVSS 4.3): Passster. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.26.
March 18, 2026
CVE-2025-68501: Mollie Payments for WooCommerce <= 8.1.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68501 in Mollie Payments For Woocommerce (CVSS 6.1): Mollie Payments for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.1.2.
March 18, 2026
CVE-2025-68495: JetEngine <= 3.8.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68495 in Jet Engine (CVSS 6.1): JetEngine. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1787: LearnPress Export Import <= 4.1.0 Missing Authentication to Unauthenticated Migrated Course Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-1787 in Learnpress Import Export (CVSS 4.8): LearnPress Export Import. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.1.1.
March 18, 2026
CVE-2026-2608: Gutenberg Blocks by Kadence Blocks <= 3.5.32 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-2608 in Kadence Blocks (CVSS 4.3): Gutenberg Blocks by Kadence Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.6.0.
March 18, 2026
CVE-2026-22352: Persian Woocommerce SMS <= 7.1.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-22352 in Persian Woocommerce Sms (CVSS 6.1): Persian Woocommerce SMS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24959: JS Help Desk <= 3.0.1 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-24959 in Js Support Ticket (CVSS 6.5): JS Help Desk. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.0.2.
March 18, 2026
CVE-2025-68514: Paid Member Subscriptions <= 2.16.8 Authenticated (Subscriber+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2025-68514 in Paid Member Subscriptions (CVSS 4.3): Paid Member Subscriptions. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.16.9.
March 18, 2026
CVE-2026-22351: FullCalendar <= 1.6 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22351 in Wp Fullcalendar (CVSS 5.3): FullCalendar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69063: New User Approve <= 3.2.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69063 in New User Approve (CVSS 5.3): New User Approve. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.2.1.
March 18, 2026
CVE-2025-68534: PDF for WPForms <= 6.3.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68534 in Pdf For Wpforms (CVSS 4.3): PDF for WPForms. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.