AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 18, 2026
CVE-2026-42385: Profile Builder Pro <= 3.15.0 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-42385 in Profile Builder Pro (CVSS 7.2): Profile Builder Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 18, 2026
CVE-2026-42381: FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.1 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-42381 in Funnel Builder (CVSS 7.5): FunnelKit – Funnel Builder for WooCommerce Checkout. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.15.0.2.
May 17, 2026
CVE-2026-42653: Affiliate Program Suite — SliceWP Affiliates <= 1.2.6 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-42653 in Slicewp (CVSS 7.2): Affiliate Program Suite — SliceWP Affiliates. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.2.7.
May 17, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Wc Hkdigital Acba Gateway (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 17, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Text To Audio (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.8.12.
May 17, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Dynamic Copyright Year (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 17, 2026
CVE-2026-3004: Snow Monkey Blocks <= 24.1.11 Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-slick' Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-3004 in Snow Monkey Blocks (CVSS 6.4): Snow Monkey Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 24.1.12.
May 17, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Auto Install Free Ssl (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.5.1.
May 17, 2026
CVE-2026-3140: Ultimate Dashboard <= 3.8.14 Cross-Site Request Forgery to Module Activation/Deactivation PoC, Patch Analysis & Rule
Medium CVE-2026-3140 in Ultimate Dashboard (CVSS 4.3): Ultimate Dashboard. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.8.15.
May 17, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Inavii Social Feed For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.7.7.
May 17, 2026
CVE-2026-40796: WPPizza – A Restaurant Plugin <= 3.19.9 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-40796 in Wppizza (CVSS 4.3): WPPizza – A Restaurant Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.20.
May 17, 2026
CVE-2026-3143: Total Upkeep <= 1.17.1 Missing Authorization to Unauthenticated Rollback Cancellation PoC, Patch Analysis & Rule
Medium CVE-2026-3143 in Boldgrid Backup (CVSS 5.3): Total Upkeep. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.17.2.
May 17, 2026
CVE-2026-42774: JetEngine <= 3.8.8.1 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-42774 in Jet Engine (CVSS 7.5): JetEngine. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 17, 2026
CVE-2026-3772: WP Editor <= 1.2.9.2 Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor PoC, Patch Analysis & Rule
High CVE-2026-3772 in Wp Editor (CVSS 8.8): WP Editor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.9.3.
May 17, 2026
CVE-2026-42651: Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42651 in Classified Listing (CVSS 4.3): Classified Listing – AI-Powered Classified ads & Business Directory Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.3.10.
May 17, 2026
CVE-2026-42659: AFI – The Easiest Integration Plugin <= 1.126.12 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42659 in Advanced Form Integration (CVSS 4.3): AFI – The Easiest Integration Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 17, 2026
CVE-2026-6127: Elementor Website Builder <= 4.0.4 Authenticated (Contributor+) Stored Cross-Site Scripting via REST API PoC, Patch Analysis & Rule
Medium CVE-2026-6127 in Elementor (CVSS 6.4): Elementor Website Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.5.
May 17, 2026
CVE-2026-42650: AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.6.7 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-42650 in Automatorwp (CVSS 7.2): AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
May 17, 2026
CVE-2026-42640: Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42640 in Classified Listing (CVSS 5.3): Classified Listing – AI-Powered Classified ads & Business Directory Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.3.9.
May 17, 2026
CVE-2026-42656: Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 Authenticated (Subscriber+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-42656 in Contest Gallery (CVSS 6.4): Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 29.0.0.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.