AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-3178: Name Directory <= 1.32.1 Unauthenticated Stored Cross-Site Scripting via 'name_directory_name' PoC, Patch Analysis & Rule
High CVE-2026-3178 in Name Directory (CVSS 7.2): Name Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.33.0.
March 18, 2026
CVE-2026-1454: Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-1454 in Lead Form Builder (CVSS 7.2): Responsive Contact Form Builder & Lead Generation Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.3.
March 18, 2026
CVE-2026-2724: Unlimited Elements For Elementor <= 2.0.5 Unauthenticated Stored Cross-Site Scripting via Form Entry Fields PoC, Patch Analysis & Rule
High CVE-2026-2724 in Unlimited Elements For Elementor (CVSS 7.2): Unlimited Elements For Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-3903: Modular Connector <= 2.5.1 Cross-Site Request Forgery via postConfirmOauth PoC, Patch Analysis & Rule
Medium CVE-2026-3903 in Modular Connector (CVSS 4.3): Modular Connector. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.6.0.
March 18, 2026
CVE-2026-27091: UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.09 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-27091 in Uipress Lite (CVSS 4.3): UiPress lite | Effortless custom dashboards, admin themes and pages. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-2569: Dear Flipbook <= 2.4.20 Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels PoC, Patch Analysis & Rule
Medium CVE-2026-2569 in 3d Flipbook Dflip Lite (CVSS 6.4): Dear Flipbook. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.27.
March 18, 2026
CVE-2026-1261: MetForm Pro <= 3.9.6 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-1261 in Metform Pro (CVSS 7.2): MetForm Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-3228: NextScripts: Social Networks Auto-Poster <= 4.4.6 Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-3228 in Social Networks Auto Poster Facebook Twitter G (CVSS 6.4): NextScripts: Social Networks Auto-Poster. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-0953: Tutor LMS Pro <= 3.9.5 Authentication Bypass via Social Login PoC, Patch Analysis & Rule
Critical CVE-2026-0953 in Tutor Pro (CVSS 9.8): Tutor LMS Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1919: Booktics <= 1.0.16 Missing Authorization to Get Items via REST API endpoints PoC, Patch Analysis & Rule
Medium CVE-2026-1919 in Booktics (CVSS 5.3): Booktics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.17.
March 18, 2026
CVE-2026-1920: Booktics <= 1.0.16 Missing Authorization to Addon Plugin Installation PoC, Patch Analysis & Rule
Medium CVE-2026-1920 in Booktics (CVSS 5.3): Booktics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.17.
March 18, 2026
CVE-2026-3585: The Events Calendar <= 6.15.17 Authenticated (Author+) Arbitrary File Read via ajax_create_import PoC, Patch Analysis & Rule
High CVE-2026-3585 in The Events Calendar (CVSS 7.5): The Events Calendar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.15.17.1.
March 18, 2026
CVE-2025-14675: Meta Box <= 5.11.1 Authenticated (Contributor+) Arbitrary File Deletion PoC, Patch Analysis & Rule
High CVE-2025-14675 in Meta Box (CVSS 7.2): Meta Box. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.11.2.
March 18, 2026
CVE-2026-22520: Handmade Framework <= 3.9 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-22520 in Handmade Framework (CVSS 6.1): Handmade Framework. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-2433: RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage PoC, Patch Analysis & Rule
Medium CVE-2026-2433 in Wp Rss Aggregator (CVSS 6.1): RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.0.12.
March 18, 2026
CVE-2026-1074: WP App Bar <= 1.5 Unauthenticated Stored Cross-Site Scripting via 'app-bar-features' Parameter PoC, Patch Analysis & Rule
High CVE-2026-1074 in Wp App Bar (CVSS 7.2): WP App Bar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1085: True Ranker <= 2.2.9 Cross-Site Request Forgery to Unauthorized True Ranker Disconnection PoC, Patch Analysis & Rule
Medium CVE-2026-1085 in Seo Local Rank (CVSS 4.3): True Ranker. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-2420: LotekMedia Popup Form <= 1.0.6 Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings PoC, Patch Analysis & Rule
Medium CVE-2026-2420 in Ltm Popup Form (CVSS 4.4): LotekMedia Popup Form. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1071: Carta Online <= 2.13.0 Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings PoC, Patch Analysis & Rule
Medium CVE-2026-1071 in Carta Online (CVSS 4.4): Carta Online. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1086: Font Pairing Preview For Landing Pages <= 1.3 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1086 in Wp Font Pairing Preview (CVSS 4.3): Font Pairing Preview For Landing Pages. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.