AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
2026-03-20
CVE-2026-2501: Ed’s Social Share <= 2.0 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (eds-social-share)
The Ed's Social Share plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `social_share` shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary…
2026-03-20
CVE-2026-2503: ElementCamp <= 2.3.6 – Authenticated (Author+) SQL Injection via 'meta_query[compare]' Parameter (element-camp)
The ElementCamp plugin for WordPress is vulnerable to time-based SQL Injection via the 'meta_query[compare]' parameter in the 'tcg_select2_search_post' AJAX action in all versions up to, and including, 2.3.6. This is due to the user-supplied compare value being placed as an SQL operator in the query without validation against an allowlist of comparison operators. The value…
2026-03-20
CVE-2026-2424: Reward Video Ad for WordPress <= 1.6 – Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings (applixir)
The Reward Video Ad for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6. This is due to insufficient input sanitization and output escaping on plugin settings such as the 'Account ID', 'Message before the video', and color fields. This makes it possible…
2026-03-20
CVE-2026-2496: Ed’s Font Awesome <= 2.0 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (eds-font-awesome)
The Ed's Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `eds_font_awesome` shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary…
2026-03-20
CVE-2026-2723: Post Snippits <= 1.0 – Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update (post-snippits)
The Post Snippits plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings page handlers for saving, adding, and deleting snippets. This makes it possible for unauthenticated attackers to modify plugin settings and inject malicious scripts via a…
2026-03-20
CVE-2026-2720: Hr Press Lite <= 1.0.2 – Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure (hr-press-lite)
The Hr Press Lite plugin for WordPress is vulnerable to unauthorized access of sensitive employee data due to a missing capability check on the `hrp-fetch-employees` AJAX action in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive employee information including names, email…
2026-03-20
CVE-2026-2427: itsukaita <= 0.1.2 – Reflected Cross-Site Scripting via 'day_from' Parameter (itsukaita)
The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'day_from' and 'day_to' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an…
2026-03-20
CVE-2026-1503: login_register <= 1.2.0 – Cross-Site Request Forgery to Stored Cross-Site Scripting (login-register)
The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0. This is due to missing nonce validation on the settings page and insufficient input sanitization and output escaping on the 'login_register_login_post' parameter. This makes it possible for unauthenticated attackers to inject arbitrary…
2026-03-20
CVE-2026-2279: myLinksDump <= 1.6 – Authenticated (Administrator+) SQL Injection via 'sort_by' and 'sort_order' Parameters (mylinksdump)
The myLinksDump plugin for WordPress is vulnerable to SQL Injection via the 'sort_by' and 'sort_order' parameters in all versions up to, and including, 1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above,…
2026-03-20
CVE-2026-1313: MimeTypes Link Icons <= 3.2.20 – Authenticated (Contributor+) Server-Side Request Forgery via Crafted Links in Post Content (mimetypes-link-icons)
The MimeTypes Link Icons plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.2.20. This is due to the plugin making outbound HTTP requests to user-controlled URLs without proper validation when the "Show file size" option is enabled. This makes it possible for authenticated attackers, with Contributor-level access…
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.