AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
June 2, 2026
CVE-2026-5073: ARMember Premium <= 7.3.1 Unauthenticated SQL Injection via 'order' Parameter PoC, Patch Analysis & Rule
High CVE-2026-5073 in Armember (CVSS 7.5): ARMember Premium. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-5074: ARMember Premium <= 7.3.1 Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-5074 in Armember (CVSS 6.5): ARMember Premium. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-5191: Tiled Gallery Carousel Without JetPack <= 3.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title' PoC, Patch Analysis & Rule
Medium CVE-2026-5191 in Tiled Gallery Carousel Without Jetpack (CVSS 5.4): Tiled Gallery Carousel Without JetPack. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-4071: BirdSeed <= 2.2.0 Cross-Site Request Forgery via BirdSeed Token Change PoC, Patch Analysis & Rule
Medium CVE-2026-4071 in Birdseed (CVSS 4.3): BirdSeed. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-2382: FPW Category Thumbnails <= 1.9.5 Authenticated (Subscriber+) Stored Cross-Site Scripting via 'id' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-2382 in Fpw Category Thumbnails (CVSS 6.4): FPW Category Thumbnails. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-1451: rognone <= 0.6.2 Reflected Cross-Site Scripting via 'a' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-1451 in Rognone (CVSS 6.1): rognone. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-3620: Word Replacer <= 0.4 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Replacement' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-3620 in Word Replacer (CVSS 4.4): Word Replacer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-4080: Easy Cart <= 1.8 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4080 in Easy Cart (CVSS 6.4): Easy Cart. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-2425: hiWeb Migration Simple <= 2.0.0.1 Reflected Cross-Site Scripting via 'new_domain' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-2425 in Hiweb Migration Simple (CVSS 6.1): hiWeb Migration Simple. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-1829: Content Visibility for Divi Builder <= 4.02 Authenticated (Contributor+) Remote Code Execution PoC, Patch Analysis & Rule
High CVE-2026-1829 in Content Visibility For Divi Builder (CVSS 8.8): Content Visibility for Divi Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.00.
June 2, 2026
CVE-2026-1450: rognone <= 0.6.2 Reflected Cross-Site Scripting via 'mode' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-1450 in Rognone (CVSS 6.1): rognone. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-4081: ZeM STL <= 1.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4081 in Zem Stl Viewer (CVSS 6.4): ZeM STL. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2026-9730: Remove NoFollow Commenter URL <= 1.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-9730 in Remove Nofollow Commenter Link (CVSS 4.3): Remove NoFollow Commenter URL. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-9722: Laiser Tag <= 1.2.5 Cross-Site Request Forgery to Plugin Settings Update via Settings Form PoC, Patch Analysis & Rule
Medium CVE-2026-9722 in Laiser Tag (CVSS 4.3): Laiser Tag. Atomic Edge summarizes impact, exploitability, and patch details.
June 2, 2026
CVE-2025-5085: wp-nano-ad <= 1.31 Authenticated (Administrator+) Stored Cross-Site Scripting via blogrole_link Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-5085 in Wp Nano Ad (CVSS 5.5): wp-nano-ad. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-9723: Google Plus One Bottom <= 0.0.2 Cross-Site Request Forgery to Plugin Settings Update via Settings Page PoC, Patch Analysis & Rule
Medium CVE-2026-9723 in Google Plus One Bottom (CVSS 4.3): Google Plus One Bottom. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
June 2, 2026
CVE-2026-8885: DeMomentSomTres Shortcodes <= 1.1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-8885 in Demomentsomtres Shortcodes (CVSS 6.4): DeMomentSomTres Shortcodes. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 22, 2026
CVE-2026-6895: Wishlist Member <= 3.30.1 Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action PoC, Patch Analysis & Rule
High CVE-2026-6895 in Wishlist Member X (CVSS 8.8): Wishlist Member. Atomic Edge summarizes impact, exploitability, and patch details.
May 22, 2026
CVE-2026-6897: Wishlist Member <= 3.30.1 Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action PoC, Patch Analysis & Rule
High CVE-2026-6897 in Wishlist Member X (CVSS 8.8): Wishlist Member. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 22, 2026
CVE-2026-6898: WishList Member <= 3.30.1 Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action PoC, Patch Analysis & Rule
High CVE-2026-6898 in Wishlist Member X (CVSS 8.8): WishList Member. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.