AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-69388: Cliengo – Chatbot <= 3.0.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69388 in Cliengo (CVSS 4.3): Cliengo – Chatbot. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.0.5.
March 18, 2026
CVE-2026-0996: Fluent Forms <= 6.1.14 Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module PoC, Patch Analysis & Rule
Medium CVE-2026-0996 in Fluentform (CVSS 6.4): Fluent Forms. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.1.15.
March 18, 2026
CVE-2026-24953: Simple File List <= 6.1.15 Authenticated (Subscriber+) Arbitrary File Download PoC, Patch Analysis & Rule
Medium CVE-2026-24953 in Simple File List (CVSS 6.5): Simple File List. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.1.16.
March 18, 2026
CVE-2025-69384: Timeline Event History <= 3.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69384 in Timeline Event History (CVSS 6.1): Timeline Event History. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67991: User Extra Fields <= 16.8 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-67991 in Wp User Extra Fields (CVSS 7.2): User Extra Fields. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69387: Simple Retail Menus <= 4.2.1 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2025-69387 in Simple Retail Menus (CVSS 8.1): Simple Retail Menus. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67993: Atarim <= 4.2.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67993 in Atarim Visual Collaboration (CVSS 5.3): Atarim. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.2.
March 18, 2026
CVE-2026-24955: Whizz Plugins <= 1.9 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24955 in Whizz Plugins (CVSS 6.1): Whizz Plugins. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69382: Themesflat Elementor <= 1.0.1 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2025-69382 in Themesflat Elementor (CVSS 8.1): Themesflat Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69383: shop <= 2.6.1 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2025-69383 in Wpshop (CVSS 8.1): shop. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69381: WooCommerce Bulk Product Editor <= 3.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69381 in Woocommerce Quick Product Editor (CVSS 4.3): WooCommerce Bulk Product Editor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69380: Upload Files Anywhere <= 2.8 Unauthenticated Arbitrary File Download PoC, Patch Analysis & Rule
High CVE-2025-69380 in Wp Upload Files Anywhere (CVSS 7.5): Upload Files Anywhere. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69379: Upload Files Anywhere <= 2.8 Unauthenticated Arbitrary File Deletion PoC, Patch Analysis & Rule
Critical CVE-2025-69379 in Wp Upload Files Anywhere (CVSS 9.1): Upload Files Anywhere. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69325: Primer MyData for Woocommerce <= 4.2.8 Unauthenticated Path Traversal PoC, Patch Analysis & Rule
Medium CVE-2025-69325 in Primer Mydata (CVSS 5.3): Primer MyData for Woocommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.9.
March 18, 2026
CVE-2026-3090: Post SMTP <= 3.8.0 Unauthenticated Stored Cross-Site Scripting via 'event_type' PoC, Patch Analysis & Rule
High CVE-2026-3090 in Post Smtp (CVSS 7.2): Post SMTP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.9.0.
March 18, 2026
CVE-2026-1926: Subscriptions for WooCommerce <= 1.9.2 Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation PoC, Patch Analysis & Rule
Medium CVE-2026-1926 in Subscriptions For Woocommerce (CVSS 5.3): Subscriptions for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.9.3.
March 18, 2026
CVE-2026-3512: Writeprint Stylometry <= 0.1 Reflected Cross-Site Scripting via 'p' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-3512 in Writeprint Stylometry (CVSS 6.1): Writeprint Stylometry. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-4268: WP Go Maps (formerly WP Google Maps) <= 10.0.05 Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings PoC, Patch Analysis & Rule
Medium CVE-2026-4268 in Wp Google Maps (CVSS 6.4): WP Go Maps (formerly WP Google Maps). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1217: Yoast Duplicate Post <= 4.5 Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite PoC, Patch Analysis & Rule
Medium CVE-2026-1217 in Duplicate Post (CVSS 5.4): Yoast Duplicate Post. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.6.
March 18, 2026
CVE-2026-1780: [CR]Paid Link Manager <= 0.5 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-1780 in Crpaid Link Manager (CVSS 6.1): [CR]Paid Link Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.6.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.