AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
June 4, 2026
CVE-2026-9022: Splide Carousel Block <= 1.7.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'url' Block Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-9022 in Splide Carousel (CVSS 6.4): Splide Carousel Block. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.7.2.
June 4, 2026
CVE-2026-2128: Breeze Cache <= 2.5.2 Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie PoC, Patch Analysis & Rule
Medium CVE-2026-2128 in Breeze (CVSS 5.3): Breeze Cache. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.5.3.
June 2, 2026
CVE-2026-9732: EmergencyWP <= 1.4.2 Cross-Site Request Forgery to Plugin Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-9732 in Emergencywp (CVSS 4.3): EmergencyWP. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-7421: Passeum Ticketing <= 1.0 Authenticated (Administrator+) Stored Cross-Site Scripting via 'shop_name' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-7421 in Passeum Ticketing (CVSS 4.4): Passeum Ticketing. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.1.
June 2, 2026
CVE-2026-5076: ARMember Premium <= 7.3.1 Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2026-5076 in Armember (CVSS 9.8): ARMember Premium. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-5073: ARMember Premium <= 7.3.1 Unauthenticated SQL Injection via 'order' Parameter PoC, Patch Analysis & Rule
High CVE-2026-5073 in Armember (CVSS 7.5): ARMember Premium. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-5074: ARMember Premium <= 7.3.1 Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-5074 in Armember (CVSS 6.5): ARMember Premium. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-5191: Tiled Gallery Carousel Without JetPack <= 3.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title' PoC, Patch Analysis & Rule
Medium CVE-2026-5191 in Tiled Gallery Carousel Without Jetpack (CVSS 5.4): Tiled Gallery Carousel Without JetPack. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-4071: BirdSeed <= 2.2.0 Cross-Site Request Forgery via BirdSeed Token Change PoC, Patch Analysis & Rule
Medium CVE-2026-4071 in Birdseed (CVSS 4.3): BirdSeed. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-2382: FPW Category Thumbnails <= 1.9.5 Authenticated (Subscriber+) Stored Cross-Site Scripting via 'id' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-2382 in Fpw Category Thumbnails (CVSS 6.4): FPW Category Thumbnails. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-1451: rognone <= 0.6.2 Reflected Cross-Site Scripting via 'a' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-1451 in Rognone (CVSS 6.1): rognone. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-3620: Word Replacer <= 0.4 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Replacement' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-3620 in Word Replacer (CVSS 4.4): Word Replacer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-4080: Easy Cart <= 1.8 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4080 in Easy Cart (CVSS 6.4): Easy Cart. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-2425: hiWeb Migration Simple <= 2.0.0.1 Reflected Cross-Site Scripting via 'new_domain' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-2425 in Hiweb Migration Simple (CVSS 6.1): hiWeb Migration Simple. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-1829: Content Visibility for Divi Builder <= 4.02 Authenticated (Contributor+) Remote Code Execution PoC, Patch Analysis & Rule
High CVE-2026-1829 in Content Visibility For Divi Builder (CVSS 8.8): Content Visibility for Divi Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.00.
June 2, 2026
CVE-2026-1450: rognone <= 0.6.2 Reflected Cross-Site Scripting via 'mode' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-1450 in Rognone (CVSS 6.1): rognone. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-4081: ZeM STL <= 1.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4081 in Zem Stl Viewer (CVSS 6.4): ZeM STL. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-9730: Remove NoFollow Commenter URL <= 1.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-9730 in Remove Nofollow Commenter Link (CVSS 4.3): Remove NoFollow Commenter URL. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-9722: Laiser Tag <= 1.2.5 Cross-Site Request Forgery to Plugin Settings Update via Settings Form PoC, Patch Analysis & Rule
Medium CVE-2026-9722 in Laiser Tag (CVSS 4.3): Laiser Tag. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2025-5085: wp-nano-ad <= 1.31 Authenticated (Administrator+) Stored Cross-Site Scripting via blogrole_link Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-5085 in Wp Nano Ad (CVSS 5.5): wp-nano-ad. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.