AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 19, 2026
CVE-2026-6566: Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST API PoC, Patch Analysis & Rule
Medium CVE-2026-6566 in Nextgen Gallery (CVSS 4.3): Photo Gallery, Sliders, Proofing and Themes. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.1.
May 19, 2026
CVE-2026-5075: All in One SEO <= 4.9.7 Authenticated (Contributor+) Sensitive Information Exposure via 'internalOptions' Localized Script Data PoC, Patch Analysis & Rule
Medium CVE-2026-5075 in All In One Seo Pack (CVSS 4.3): All in One SEO. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-5200: AcyMailing <= 10.8.2 Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' PoC, Patch Analysis & Rule
High CVE-2026-5200 in Acymailing (CVSS 8.8): AcyMailing. Atomic Edge summarizes impact, exploitability, and patch details. Update to 10.9.0.
May 19, 2026
CVE-2026-2955: AI Chatbot & Workflow Automation by AIWU <= 1.4.14 Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header PoC, Patch Analysis & Rule
Medium CVE-2026-2955 in Ai Copilot Content Generator (CVSS 6.4): AI Chatbot & Workflow Automation by AIWU. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.4.15.
May 19, 2026
CVE-2025-15369: Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 Missing Authorization to Unauthenticated Xpro Template Creation PoC, Patch Analysis & Rule
Medium CVE-2025-15369 in Xpro Elementor Addons (CVSS 5.3): Xpro Addons — 140+ Widgets for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-9010: Boost <= 2.0.3 Unauthenticated Blind SQL Injection via Multiple Parameters PoC, Patch Analysis & Rule
High CVE-2026-9010 in Boost (CVSS 7.5): Boost. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-3985: Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 Unauthenticated SQL Injection via 'checkout_uuid' Parameter PoC, Patch Analysis & Rule
High CVE-2026-3985 in Creative Mail By Constant Contact (CVSS 7.5): Creative Mail – Easier WordPress & WooCommerce Email Marketing. Atomic Edge summarizes impact, exploitability, and patch details.
May 19, 2026
CVE-2026-7284: Easy Elements for Elementor <= 1.4.4 Unauthenticated Privilege Escalation via easyel_handle_register PoC, Patch Analysis & Rule
Critical CVE-2026-7284 in Easy Elements (CVSS 9.8): Easy Elements for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-6405: Anomify AI <= 0.3.6 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-6405 in Anomify (CVSS 4.3): Anomify AI. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-8610: TypeSquare Webfonts for ConoHa <= 2.0.4 Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via 'fontThemeUseType' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-8610 in Ts Webfonts For Conoha (CVSS 4.3): TypeSquare Webfonts for ConoHa. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-7467: Read More & Accordion <= 3.5.7 Privilege Escalation via importData PoC, Patch Analysis & Rule
High CVE-2026-7467 in Expand Maker (CVSS 8.8): Read More & Accordion. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-8627: Correct Prices <= 1.0 Reflected Cross-Site Scripting via PHP_SELF Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-8627 in Correct Prices (CVSS 6.1): Correct Prices. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 19, 2026
CVE-2026-7472: Read More & Accordion <= 3.5.7 Authenticated (Administrator+) SQL Injection via 'orderby' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-7472 in Expand Maker (CVSS 4.9): Read More & Accordion. Atomic Edge summarizes impact, exploitability, and patch details.
May 19, 2026
CVE-2026-6728: Slider Revolution <= 7.0.9 Unauthenticated Sensitive Information Exposure via 'sliders/stream' PoC, Patch Analysis & Rule
Medium CVE-2026-6728 in Revslider (CVSS 5.3): Slider Revolution. Atomic Edge summarizes impact, exploitability, and patch details.
May 19, 2026
CVE-2026-8626: SponsorMe <= 0.5.2 Reflected Cross-Site Scripting via PHP_SELF Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-8626 in Sponsorme (CVSS 6.1): SponsorMe. Atomic Edge summarizes impact, exploitability, and patch details.
May 19, 2026
CVE-2026-8624: LJ comments import: reloaded <= 0.97.1 Reflected Cross-Site Scripting via PHP_SELF Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-8624 in Lj Comments Import Reloaded (CVSS 6.1): LJ comments import: reloaded. Atomic Edge summarizes impact, exploitability, and patch details.
May 19, 2026
CVE-2026-6549: Logo Manager For Enamad <= 0.7.4 Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6549 in Logo Manager For Enamad (CVSS 6.4): Logo Manager For Enamad. Atomic Edge summarizes impact, exploitability, and patch details.
May 18, 2026
CVE-2026-4883: Piotnet Forms <= 2.1.40 Unauthenticated Arbitrary File Upload via Form File Upload PoC, Patch Analysis & Rule
Critical CVE-2026-4883 in Piotnetforms Pro (CVSS 9.8): Piotnet Forms. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 18, 2026
CVE-2026-4885: Piotnet Addons for Elementor Pro <= 7.1.70 Unauthenticated Arbitrary File Upload via Form File Upload PoC, Patch Analysis & Rule
Critical CVE-2026-4885 in Piotnet Addons For Elementor Pro (CVSS 9.8): Piotnet Addons for Elementor Pro. Atomic Edge summarizes impact, exploitability, and patch details.
May 18, 2026
CVE-2026-42639: GD Rating System <= 3.6.2 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-42639 in Gd Rating System (CVSS 7.5): GD Rating System. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.7.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.