AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Simply Gallery Block (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.2.4.5.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Woocustomizer (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.6.0.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Gs Testimonial (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.2.9.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Wp Stripe Donation (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.2.9.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Blog Designer Pack (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.4.11.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Pdf Poster (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.1.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Easy Age Verify (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Automatic Internal Links For Seo (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Ultimeter (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.0.7.
May 6, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Radio Station (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.5.17.
May 6, 2026
CVE-2026-32445: Elementor Website Builder <= 3.35.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32445 in Elementor (CVSS 4.3): Elementor Website Builder. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.35.6.
May 5, 2026
CVE-2026-6672: Affiliate Program Suite <= 1.2.7 Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-6672 in Slicewp (CVSS 6.4): Affiliate Program Suite. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.2.8.
May 5, 2026
CVE-2026-1719: Gravity Bookings <= 2.5.9 Unauthenticated SQL Injection via 'category_id' Parameter PoC, Patch Analysis & Rule
High CVE-2026-1719 in Gf Bookings Premium (CVSS 7.5): Gravity Bookings. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 5, 2026
CVE-2026-6702: Publish 2 Ping.fm <= 1.1 Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpPingPingKey' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6702 in Publish 2 Pingfm (CVSS 6.1): Publish 2 Ping.fm. Atomic Edge summarizes impact, exploitability, and patch details.
May 5, 2026
CVE-2026-3208: Mercado Pago payments for WooCommerce <= 8.7.11 Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure PoC, Patch Analysis & Rule
Medium CVE-2026-3208 in Woocommerce Mercadopago (CVSS 5.3): Mercado Pago payments for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.7.12.
May 5, 2026
CVE-2026-5753: All-in-One WP Migration Unlimited Extension <= 2.83 Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download PoC, Patch Analysis & Rule
Medium CVE-2026-5753 in All In One Wp Migration Unlimited Extension (CVSS 6.5): All-in-One WP Migration Unlimited Extension. Atomic Edge summarizes impact, exploitability, and patch details.
May 5, 2026
CVE-2026-7448: LatePoint <= 5.5.0 Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter PoC, Patch Analysis & Rule
High CVE-2026-7448 in Latepoint (CVSS 7.2): LatePoint. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.5.1.
May 5, 2026
CVE-2026-7457: LatePoint <= 5.5.0 Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile Update PoC, Patch Analysis & Rule
Medium CVE-2026-7457 in Latepoint (CVSS 6.4): LatePoint. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.5.1.
May 5, 2026
CVE-2026-7332: LatePoint <= 5.5.0 Unauthenticated Stored Cross-Site Scripting via 'booking_form_page_url' Parameter PoC, Patch Analysis & Rule
High CVE-2026-7332 in Latepoint (CVSS 7.2): LatePoint. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.5.1.
May 5, 2026
CVE-2026-2306: Ninja Tables <= 5.2.6 Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation PoC, Patch Analysis & Rule
Medium CVE-2026-2306 in Ninja Tables (CVSS 4.3): Ninja Tables. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.2.7.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.