AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 20, 2026
CVE-2026-5118: Divi Form Builder <= 5.1.2 Unauthenticated Privilege Escalation via 'role' PoC, Patch Analysis & Rule
Critical CVE-2026-5118 in Divi Form Builder (CVSS 9.8): Divi Form Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-8685: Infility Global <= 2.15.16 Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-8685 in Infility Global (CVSS 6.5): Infility Global. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-4811: WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field PoC, Patch Analysis & Rule
Medium CVE-2026-4811 in Wpb Floating Menu Or Categories (CVSS 4.9): WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.0.9.
May 20, 2026
CVE-2026-8423: JaviBola Custom Theme Test <= 2.0.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-8423 in Javibola Custom Theme (CVSS 4.3): JaviBola Custom Theme Test. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-8424: Remove Yellow BGBOX <= 1.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-8424 in Remove Yellow Bgbox (CVSS 4.3): Remove Yellow BGBOX. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-8418: Games Catalog <= 1.2.0 Cross-Site Request Forgery to Arbitrary Game/Post Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-8418 in Game Catalog (CVSS 4.3): Games Catalog. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-6456: Account Switcher <= 1.0.2 Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-6456 in Account Switcher (CVSS 8.8): Account Switcher. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-7462: VatanSMS WP SMS <= 1.01 Reflected Cross-Site Scripting via 'page' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-7462 in Wp Sms Vatansms Com (CVSS 6.1): VatanSMS WP SMS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-8419: Amazon Scraper <= 1.1 Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-8419 in Amazon Scraper (CVSS 4.3): Amazon Scraper. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6452: Bigfishgames Syndicate <= 1.2 Cross-Site Request Forgery to Settings Reset and Update PoC, Patch Analysis & Rule
Medium CVE-2026-6452 in Bigfishgames Syndicate (CVSS 4.3): Bigfishgames Syndicate. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-8420: BLOGCHAT Chat System <= 1.3.6.3 Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-8420 in Blogchat Chat System (CVSS 6.1): BLOGCHAT Chat System. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6401: Bottom Bar <= 0.1.7 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-6401 in Bottom Bar (CVSS 4.3): Bottom Bar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6400: Child Height Predictor by Ostheimer <= 1.3 Cross-Site Request Forgery to Settings Update via Plugin Settings Form PoC, Patch Analysis & Rule
Medium CVE-2026-6400 in Child Height Predictor (CVSS 4.3): Child Height Predictor by Ostheimer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6404: Anomify AI <= 0.3.6 Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6404 in Anomify (CVSS 4.4): Anomify AI. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-6399: General Options <= 1.1.0 Authenticated (Administrator+) Stored Cross-Site Scripting via 'ad_contact_number' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6399 in General Options (CVSS 4.4): General Options. Atomic Edge summarizes impact, exploitability, and patch details.
May 20, 2026
CVE-2026-6395: Word 2 Cash <= 0.9.2 Cross-Site Request Forgeryto Stored Cross-Site Scripting via Settings Page PoC, Patch Analysis & Rule
Medium CVE-2026-6395 in Word 2 Cash (CVSS 6.1): Word 2 Cash. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 20, 2026
CVE-2026-6397: Sticky <= 2.5.6 Authenticated (Contributor+) Stored Cross-Site Scripting via 'readmoretext' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6397 in Sticky (CVSS 6.4): Sticky. Atomic Edge summarizes impact, exploitability, and patch details.
May 19, 2026
CVE-2026-7637: Boost <= 2.0.3 Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie PoC, Patch Analysis & Rule
Critical CVE-2026-7637 in Boost (CVSS 9.8): Boost. Atomic Edge summarizes impact, exploitability, and patch details.
May 19, 2026
CVE-2026-7613: Cost of Goods by PixelYourSite <= 1.2.12 Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import PoC, Patch Analysis & Rule
High CVE-2026-7613 in Pixel Cost Of Goods (CVSS 7.2): Cost of Goods by PixelYourSite. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-7522: Advanced Database Cleaner – Premium <= 4.1.0 Authenticated (Subscriber+) Local File Inclusion via 'template' PoC, Patch Analysis & Rule
High CVE-2026-7522 in Advanced Database Cleaner Premium (CVSS 8.8): Advanced Database Cleaner – Premium. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.