AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-1073: Purchase Button For Affiliate Link <= 1.0.2 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1073 in Purchase Button (CVSS 4.3): Purchase Button For Affiliate Link. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1824: Infomaniak Connect for OpenID <= 1.0.2 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1824 in Infomaniak Connect Openid (CVSS 6.4): Infomaniak Connect for OpenID. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1825: Show YouTube video <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1825 in Show Youtube Video (CVSS 6.4): Show YouTube video. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1805: DA Media GigList <= 1.9.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'list_title' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1805 in Damedia Giglist (CVSS 6.4): DA Media GigList. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1820: Media Library Alt Text Editor <= 1.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_id' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1820 in Media Library Alt Text Editor (CVSS 6.4): Media Library Alt Text Editor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-8899: Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 Authenticated (Author+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2025-8899 in Ppv Live Webcams (CVSS 8.8): Paid Videochat Turnkey Site – HTML5 PPV Live Webcams. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1650: MDJM Event Management <= 1.7.8.1 Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-1650 in Mobile Dj Manager (CVSS 5.3): MDJM Event Management. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.8.2.
March 18, 2026
CVE-2026-1823: Consensus Embed <= 1.6 Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1823 in Consensus Embed (CVSS 6.4): Consensus Embed. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14353: ZIP Code Based Content Protection <= 1.0.2 Unauthenticated SQL Injection via 'zipcode' Parameter PoC, Patch Analysis & Rule
High CVE-2025-14353 in Zip Code Based Content Protection (CVSS 7.5): ZIP Code Based Content Protection. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1574: MyQtip – easy qTip2 <= 2.0.5 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-1574 in Myqtip Easy Qtip2 (CVSS 6.4): MyQtip – easy qTip2. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1569: Wueen <= 0.2.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-1569 in Wueen (CVSS 6.4): Wueen. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-2721: MailArchiver <= 4.4.0 Authenticated (Administrator+) Stored Cross-Site Scripting via Settings PoC, Patch Analysis & Rule
Medium CVE-2026-2721 in Mailarchiver (CVSS 4.8): MailArchiver. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.5.0.
March 18, 2026
CVE-2026-2429: Community Events <= 1.5.8 Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field PoC, Patch Analysis & Rule
Medium CVE-2026-2429 in Community Events (CVSS 4.9): Community Events. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.5.9.
March 18, 2026
CVE-2026-2494: ProfileGrid <= 5.9.8.2 Cross-Site Request Forgery to Group Membership Request Approval/Denial PoC, Patch Analysis & Rule
Medium CVE-2026-2494 in Profilegrid User Profiles Groups And Communities (CVSS 4.3): ProfileGrid. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.9.8.3.
March 18, 2026
CVE-2026-2488: ProfileGrid <= 5.9.8.1 Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-2488 in Profilegrid User Profiles Groups And Communities (CVSS 4.3): ProfileGrid. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.9.8.2.
March 18, 2026
CVE-2026-2431: CM Custom Reports <= 1.2.7 Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters PoC, Patch Analysis & Rule
Medium CVE-2026-2431 in Cm Custom Reports (CVSS 6.1): CM Custom Reports. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-2020: JS Archive List <= 6.1.7 Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute PoC, Patch Analysis & Rule
High CVE-2026-2020 in Jquery Archive List Widget (CVSS 7.5): JS Archive List. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.2.0.
March 18, 2026
CVE-2026-1644: WP Frontend Profile <= 1.3.8 Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection PoC, Patch Analysis & Rule
Medium CVE-2026-1644 in Wp Front End Profile (CVSS 4.3): WP Frontend Profile. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.9.
March 18, 2026
CVE-2026-2722: Stock Ticker <= 3.26.1 Authenticated (Administrator+) Stored Cross-Site Scripting via Template PoC, Patch Analysis & Rule
Medium CVE-2026-2722 in Stock Ticker (CVSS 4.8): Stock Ticker. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-1902: Hammas Calendar <= 1.5.11 Authenticated (Contributor+) Stored Cross-Site Scripting via 'apix' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1902 in Hammas Calendar (CVSS 6.4): Hammas Calendar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.5.12.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.