AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
July 5, 2026
CVE-2026-57321: Interactive Content – H5P <= 1.17.7 Authenticated (Contributor+) Arbitrary File Deletion PoC, Patch Analysis & Rule
High CVE-2026-57321 in H5p (CVSS 8.1): Interactive Content – H5P. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.17.8.
July 5, 2026
CVE-2026-57627: Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.0.11 Authenticated (Subscriber+) Server-Side Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-57627 in Kirki (CVSS 6.4): Kirki – Freeform Page Builder, Website Builder & Customizer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.0.12.
July 5, 2026
CVE-2026-57649: Shoppable Images (Lookbook) for WooCommerce <= 1.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-57649 in Mabel Shoppable Images Lite (CVSS 4.3): Shoppable Images (Lookbook) for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.3.1.
July 5, 2026
CVE-2026-57314: SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.3.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-57314 in Surecart (CVSS 6.1): SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions.... Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.3.3.
July 5, 2026
CVE-2026-57640: MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.30 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-57640 in Masterstudy Lms Learning Management System (CVSS 4.3): MasterStudy LMS WordPress Plugin – for Online Courses and Education. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.7.31.
July 5, 2026
CVE-2025-63041: Forget About Shortcode Buttons <= 2.1.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-63041 in Forget About Shortcode Buttons (CVSS 4.3): Forget About Shortcode Buttons. Atomic Edge summarizes impact, exploitability, and patch details.
July 5, 2026
CVE-2026-57620: Exclusive Addons for Elementor <= 2.7.9.8 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-57620 in Exclusive Addons For Elementor (CVSS 6.4): Exclusive Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.7.9.9.
July 5, 2026
CVE-2026-57630: Blocksy Companion Pro <= 2.1.46 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-57630 in Blocksy Companion Pro (CVSS 5.3): Blocksy Companion Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 5, 2026
CVE-2026-57629: StatCounter – Free Real Time Visitor Stats <= 2.1.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-57629 in Official Statcounter Plugin For Wordpress (CVSS 6.4): StatCounter – Free Real Time Visitor Stats. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.1.2.
July 5, 2026
CVE-2026-57638: Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution <= 2.1.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-57638 in Fluent Booking (CVSS 6.4): Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
July 5, 2026
CVE-2026-57650: Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.8.3 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-57650 in Magazine Blocks (CVSS 6.4): Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
July 5, 2026
CVE-2026-57654: Affiliates Manager <= 2.9.49 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-57654 in Affiliates Manager (CVSS 4.3): Affiliates Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 5, 2026
CVE-2026-57633: WCBoost – Products Compare <= 1.1.0 Unauthenticated Sensitive Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-57633 in Wcboost Products Compare (CVSS 5.3): WCBoost – Products Compare. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.1.
July 5, 2026
CVE-2026-57647: Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More <= 1.6.1 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-57647 in Panorama (CVSS 7.5): Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.7.0.
July 5, 2026
CVE-2026-57642: Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.8 Authenticated (Contributor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-57642 in Gallery Plugin (CVSS 6.5): Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.7.9.
July 5, 2026
CVE-2026-57634: PPWP – Password Protect Pages <= 1.9.19 Authenticated (Contributor+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-57634 in Password Protect Page (CVSS 4.3): PPWP – Password Protect Pages. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.9.20.
July 5, 2026
CVE-2026-57664: Bopo – WooCommerce Product Bundle Builder <= 1.1.6 Unauthenticated Sensitive Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-57664 in Bopo Woo Product Bundle Builder (CVSS 5.3): Bopo – WooCommerce Product Bundle Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 4, 2026
CVE-2026-12904: Kadence Blocks <= 3.7.7 Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Optimizer Data Deletion/Read/Modification via 'post_path' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-12904 in Kadence Blocks (CVSS 4.3): Kadence Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 4, 2026
CVE-2026-10513: Webmention <= 5.8.0 Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author Properties PoC, Patch Analysis & Rule
High CVE-2026-10513 in Webmention (CVSS 7.2): Webmention. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.8.1.
July 4, 2026
CVE-2026-12133: JoomSport <= 5.7.8 Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action PoC, Patch Analysis & Rule
Medium CVE-2026-12133 in Joomsport Sports League Results Management (CVSS 4.3): JoomSport. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.7.9.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.