AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 17, 2026
CVE-2026-42657: Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42657 in Contest Gallery (CVSS 5.3): Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 29.0.0.
May 17, 2026
CVE-2026-42658: Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-42658 in Classified Listing (CVSS 7.2): Classified Listing – AI-Powered Classified ads & Business Directory Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.3.9.
May 17, 2026
CVE-2025-15484: Order Notification for WooCommerce – Get Audio Alert on new Orders < 3.6.3 Unauthenticated Remote Code Execution PoC, Patch Analysis & Rule
Critical CVE-2025-15484 in Woc Order Alert (CVSS 9.8): Order Notification for WooCommerce – Get Audio Alert on new Orders < 3.6.3 - Unauthenticated Remote.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF...
May 16, 2026
CVE-2026-6247: scratchblocks for WP <= 1.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'element' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6247 in Scratchblocks For Wp (CVSS 6.4): scratchblocks for WP. Atomic Edge summarizes impact, exploitability, and patch details.
May 16, 2026
CVE-2026-4935: OttoKit: All-in-One Automation Platform < 1.1.23 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-4935 in Suretriggers (CVSS 7.5): OttoKit: All-in-One Automation Platform < 1.1.23 - Unauthenticated SQL Injection. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.1.23.
May 16, 2026
CVE-2026-6237: Quick Table <= 1.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6237 in Quick Table (CVSS 6.4): Quick Table. Atomic Edge summarizes impact, exploitability, and patch details.
May 16, 2026
CVE-2026-40799: Simple CAPTCHA Alternative with Cloudflare Turnstile <= 1.38.0 Broken Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-40799 in Simple Cloudflare Turnstile (CVSS 5.3): Simple CAPTCHA Alternative with Cloudflare Turnstile. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.38.1.
May 16, 2026
CVE-2026-8719: AI Engine 3.4.9 Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token PoC, Patch Analysis & Rule
High CVE-2026-8719 in Ai Engine (CVSS 8.8): AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
May 16, 2026
CVE-2026-42665: WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.70 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-42665 in Wp Data Access (CVSS 7.5): WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.5.71.
May 16, 2026
CVE-2026-25468: Happy Addons for Elementor <= 3.20.8 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-25468 in Happy Elementor Addons (CVSS 5.3): Happy Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.21.0.
May 16, 2026
CVE-2026-27329: YITH WooCommerce Wishlist <= 4.12.0 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-27329 in Yith Woocommerce Wishlist (CVSS 5.3): YITH WooCommerce Wishlist. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.13.0.
May 16, 2026
CVE-2026-42664: AI Product Search for WooCommerce – Motive Commerce Search <= 1.38.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42664 in Motive Commerce Search (CVSS 5.3): AI Product Search for WooCommerce – Motive Commerce Search. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.38.3.
May 16, 2026
CVE-2026-40798: wpForo Forum <= 3.0.4 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-40798 in Wpforo (CVSS 7.5): wpForo Forum. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.0.5.
May 16, 2026
CVE-2026-25436: Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25436 in Royal Elementor Addons (CVSS 5.3): Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization. Atomic Edge summarizes impact, exploitability, and patch details...
May 16, 2026
CVE-2026-27421: Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-27421 in Royal Elementor Addons (CVSS 6.4): Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated.... Atomic Edge summarizes impact, exploitability, and patch details. Update to...
May 16, 2026
CVE-2025-68060: Team Members – Multi Language Supported Team Plugin <= 8.5 Authenticated (Editor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2025-68060 in Team Showcase Supreme (CVSS 4.9): Team Members – Multi Language Supported Team Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 8.6.
May 16, 2026
CVE-2026-27415: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-27415 in Woo Bulk Editor (CVSS 4.3): BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net. Atomic Edge summarizes impact, exploitability, and patch details.
May 16, 2026
CVE-2025-68604: WPGraphQL <= 2.5.3 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-68604 in Wp Graphql (CVSS 4.3): WPGraphQL. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.5.4.
May 16, 2026
CVE-2026-27416: PDF Poster – Display PDF Files with Custom Viewer <= 2.4.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-27416 in Pdf Poster (CVSS 5.3): PDF Poster – Display PDF Files with Custom Viewer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.5.0.
May 16, 2026
CVE-2026-42773: eMagicOne Store Manager for WooCommerce <= 1.3.2 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-42773 in Store Manager Connector (CVSS 7.5): eMagicOne Store Manager for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.