AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 4, 2026
CVE-2026-4330: Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-4330 in Blog2social (CVSS 4.3): Blog2Social: Social Media Auto Post & Scheduler. Atomic Edge summarizes impact, exploitability, and patch details. Update to 8.8.4.
May 4, 2026
CVE-2026-4300: Robo Gallery <= 5.1.3 Authenticated (Author+) Stored Cross-Site Scripting via 'Loading Label' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-4300 in Robo Gallery (CVSS 6.4): Robo Gallery. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.1.4.
May 4, 2026
CVE-2026-3535: DSGVO Google Web Fonts GDPR <= 1.1 Unauthenticated Arbitrary File Upload via 'fonturl' Parameter PoC, Patch Analysis & Rule
Critical CVE-2026-3535 in Dsgvo Google Web Fonts Gdpr (CVSS 9.8): DSGVO Google Web Fonts GDPR. Atomic Edge summarizes impact, exploitability, and patch details.
May 4, 2026
CVE-2026-5167: Masteriyo LMS <= 2.1.7 Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint PoC, Patch Analysis & Rule
Medium CVE-2026-5167 in Learning Management System (CVSS 5.3): Masteriyo LMS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.1.8.
May 4, 2026
CVE-2026-3480: WP Blockade <= 0.9.14 Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'shortcode' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-3480 in Wp Blockade (CVSS 6.5): WP Blockade. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-3781: Attendance Manager <= 0.6.2 Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-3781 in Attendance Manager (CVSS 5.4): Attendance Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-2838: Whole Enquiry Cart for WooCommerce <= 1.2.1 Authenticated (Administrator+) Stored Cross-Site Scripting via 'woowhole_success_msg' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-2838 in Whole Cart Enquiry (CVSS 4.4): Whole Enquiry Cart for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-3477: PZ Frontend Manager <= 1.0.6 Missing Authorization to Arbitrary User Deletion via 'dataType' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-3477 in Pz Frontend Manager (CVSS 5.3): PZ Frontend Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-4871: Sports Club Management <= 1.12.9 Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-4871 in Sports Club Management (CVSS 6.4): Sports Club Management. Atomic Edge summarizes impact, exploitability, and patch details.
May 4, 2026
CVE-2026-4808: Gerador de Certificados – DevApps <= 1.3.6 Authenticated (Administrator+) Arbitrary File Upload PoC, Patch Analysis & Rule
High CVE-2026-4808 in Gerador De Certificados Devapps (CVSS 7.2): Gerador de Certificados – DevApps. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2025-1794: AM LottiePlayer <= 3.6.0 Authenticated (Author+) Stored Cross-Site Scripting via SVG PoC, Patch Analysis & Rule
Medium CVE-2025-1794 in Am Lottieplayer (CVSS 5.4): AM LottiePlayer. Atomic Edge summarizes impact, exploitability, and patch details.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Post Smtp (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.1.0.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Shortcodes Ultimate (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 7.3.4.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Cf7 Message Filter (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.6.3.3.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Wp Post Author (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Unlimited Elements For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-7567: Temporary Login <= 1.0.0 Authentication Bypass to Account Takeover PoC, Patch Analysis & Rule
Critical CVE-2026-7567 in Temporary Login (CVSS 9.8): Temporary Login. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.0.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Wpbits Addons For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Add Search To Menu (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.5.9.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Restaurant Cafe Addon For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.1.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.