AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
June 21, 2026
CVE-2026-49055: Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-49055 in Drag And Drop Multiple File Upload Contact Form 7 (CVSS 7.2): Drag and Drop Multiple File Upload for Contact Form 7. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update...
June 21, 2026
CVE-2026-49057: JobSearch WP Job Board <= 3.2.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-49057 in Wp Jobsearch (CVSS 5.3): JobSearch WP Job Board. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 21, 2026
CVE-2026-49780: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.2 Authenticated (Customer+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-49780 in Dokan Lite (CVSS 8.8): Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
June 21, 2026
CVE-2026-48867: Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.1.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-48867 in Quiz Master Next (CVSS 7.2): Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker. Atomic Edge summarizes impact, exploitability, and patch details. Update to 11.1.3.
June 21, 2026
CVE-2026-34892: Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-34892 in Seo By Rank Math (CVSS 4.3): Rank Math SEO – AI SEO Tools to Dominate SEO Rankings. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.271.1.
June 21, 2026
CVE-2026-42775: AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.7.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-42775 in Automatorwp (CVSS 7.2): AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
June 21, 2026
CVE-2026-48969: Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) <= 9.5.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-48969 in Really Simple Ssl (CVSS 4.3): Really Simple Security – Simple and Performant Security (formerly Really Simple SSL). Atomic Edge summarizes impact, exploitability, and patch details. Update to 9.5.10.
June 21, 2026
CVE-2026-48970: Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) <= 9.5.10 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-48970 in Really Simple Ssl (CVSS 5.3): Really Simple Security – Simple and Performant Security (formerly Really Simple SSL). Atomic Edge summarizes impact, exploitability, and patch details. Update to 9.5.10.1.
June 21, 2026
CVE-2026-48966: FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-48966 in Funnel Builder (CVSS 7.2): FunnelKit – Funnel Builder for WooCommerce Checkout. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.15.0.3.
June 21, 2026
CVE-2026-48882: WP Time Slots Booking Form <= 1.2.50 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-48882 in Wp Time Slots Booking Form (CVSS 6.5): WP Time Slots Booking Form. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.2.51.
June 21, 2026
CVE-2026-49056: WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.4 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-49056 in Print Invoices Packing Slip Labels For Woocommerce (CVSS 5.3): WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels. Atomic Edge summarizes impact, exploitability, and patch...
June 21, 2026
CVE-2026-48878: Visual Link Preview <= 2.4.1 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-48878 in Visual Link Preview (CVSS 4.3): Visual Link Preview. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.2.
June 21, 2026
CVE-2026-48887: JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-48887 in Js Support Ticket (CVSS 5.3): JS Help Desk – AI-Powered Support & Ticketing System. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.1.0.
June 21, 2026
CVE-2026-48964: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-48964 in Elex Helpdesk Customer Support Ticket System (CVSS 6.5): ELEX WordPress HelpDesk & Customer Ticketing System. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to...
June 21, 2026
CVE-2026-49782: Elementor Website Builder – more than just a page builder <= 4.1.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-49782 in Elementor (CVSS 4.3): Elementor Website Builder – more than just a page builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.1.1.
June 21, 2026
CVE-2026-48880: WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.2 Authenticated (Subscriber+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-48880 in Wp Job Portal (CVSS 6.4): WP Job Portal – AI-Powered Recruitment System for Company or Job Board website. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.5.3.
June 21, 2026
CVE-2026-48965: Backup, Restore and Migrate your sites with XCloner <= 4.8.6 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-48965 in Xcloner Backup And Restore (CVSS 4.3): Backup, Restore and Migrate your sites with XCloner. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.8.7.
June 21, 2026
CVE-2026-48889: Booking for Appointments and Events Calendar – Amelia <= 2.3 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-48889 in Ameliabooking (CVSS 8.8): Booking for Appointments and Events Calendar – Amelia. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.
June 21, 2026
CVE-2025-12352: Gravity Forms <= 2.9.20 Unauthenticated Arbitrary File Upload via 'copy_post_image' PoC, Patch Analysis & Rule
Critical CVE-2025-12352 in Gravityforms (CVSS 9.8): Gravity Forms. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 20, 2026
CVE-2026-5305: Email Encoder < 0.3.12 (premium) < 1.0.25 (free) Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-5305 in Email Address Encoder (CVSS 7.2): Email Encoder < 0.3.12 (premium) < 1.0.25 (free) - Unauthenticated Stored Cross-Site Scripting. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.0.25.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.