AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 21, 2026
CVE-2026-6394: Nexa Blocks <= 1.1.1 Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6394 in Nexa Blocks (CVSS 5.4): Nexa Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 21, 2026
CVE-2026-6391: Sentence To SEO (keywords, description and tags) <= 1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Page Parameters PoC, Patch Analysis & Rule
Medium CVE-2026-6391 in Sentence To Seo (CVSS 6.1): Sentence To SEO (keywords, description and tags). Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-1543: Avada (Fusion) Builder <= 3.15.2 Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Shortcodes PoC, Patch Analysis & Rule
Medium CVE-2026-1543 in Fusion Builder (CVSS 6.4): Avada (Fusion) Builder. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-1881: Broadstreet <= 1.52.2 Authenticated (Subscriber+) Private Post Meta Disclosure via get_sponsored_meta PoC, Patch Analysis & Rule
Medium CVE-2026-1881 in Broadstreet (CVSS 4.3): Broadstreet. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.53.2.
May 20, 2026
CVE-2026-6279: Avada (Fusion) Builder <= 3.15.2 Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Handler PoC, Patch Analysis & Rule
Critical CVE-2026-6279 in Fusion Builder (CVSS 9.8): Avada (Fusion) Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-5118: Divi Form Builder <= 5.1.2 Unauthenticated Privilege Escalation via 'role' PoC, Patch Analysis & Rule
Critical CVE-2026-5118 in Divi Form Builder (CVSS 9.8): Divi Form Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-8685: Infility Global <= 2.15.16 Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-8685 in Infility Global (CVSS 6.5): Infility Global. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-4811: WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field PoC, Patch Analysis & Rule
Medium CVE-2026-4811 in Wpb Floating Menu Or Categories (CVSS 4.9): WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.0.9.
May 20, 2026
CVE-2026-8423: JaviBola Custom Theme Test <= 2.0.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-8423 in Javibola Custom Theme (CVSS 4.3): JaviBola Custom Theme Test. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-8424: Remove Yellow BGBOX <= 1.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-8424 in Remove Yellow Bgbox (CVSS 4.3): Remove Yellow BGBOX. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-8418: Games Catalog <= 1.2.0 Cross-Site Request Forgery to Arbitrary Game/Post Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-8418 in Game Catalog (CVSS 4.3): Games Catalog. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-6456: Account Switcher <= 1.0.2 Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-6456 in Account Switcher (CVSS 8.8): Account Switcher. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-7462: VatanSMS WP SMS <= 1.01 Reflected Cross-Site Scripting via 'page' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-7462 in Wp Sms Vatansms Com (CVSS 6.1): VatanSMS WP SMS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-8419: Amazon Scraper <= 1.1 Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-8419 in Amazon Scraper (CVSS 4.3): Amazon Scraper. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6452: Bigfishgames Syndicate <= 1.2 Cross-Site Request Forgery to Settings Reset and Update PoC, Patch Analysis & Rule
Medium CVE-2026-6452 in Bigfishgames Syndicate (CVSS 4.3): Bigfishgames Syndicate. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-8420: BLOGCHAT Chat System <= 1.3.6.3 Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-8420 in Blogchat Chat System (CVSS 6.1): BLOGCHAT Chat System. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6401: Bottom Bar <= 0.1.7 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-6401 in Bottom Bar (CVSS 4.3): Bottom Bar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6400: Child Height Predictor by Ostheimer <= 1.3 Cross-Site Request Forgery to Settings Update via Plugin Settings Form PoC, Patch Analysis & Rule
Medium CVE-2026-6400 in Child Height Predictor (CVSS 4.3): Child Height Predictor by Ostheimer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6404: Anomify AI <= 0.3.6 Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6404 in Anomify (CVSS 4.4): Anomify AI. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-6399: General Options <= 1.1.0 Authenticated (Administrator+) Stored Cross-Site Scripting via 'ad_contact_number' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6399 in General Options (CVSS 4.4): General Options. Atomic Edge summarizes impact, exploitability, and patch details.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.