AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 17, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Dynamic Copyright Year (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 17, 2026
CVE-2026-3004: Snow Monkey Blocks <= 24.1.11 Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-slick' Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-3004 in Snow Monkey Blocks (CVSS 6.4): Snow Monkey Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 24.1.12.
May 17, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Auto Install Free Ssl (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.5.1.
May 17, 2026
CVE-2026-3140: Ultimate Dashboard <= 3.8.14 Cross-Site Request Forgery to Module Activation/Deactivation PoC, Patch Analysis & Rule
Medium CVE-2026-3140 in Ultimate Dashboard (CVSS 4.3): Ultimate Dashboard. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.8.15.
May 17, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Inavii Social Feed For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.7.7.
May 17, 2026
CVE-2026-40796: WPPizza – A Restaurant Plugin <= 3.19.9 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-40796 in Wppizza (CVSS 4.3): WPPizza – A Restaurant Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.20.
May 17, 2026
CVE-2026-3143: Total Upkeep <= 1.17.1 Missing Authorization to Unauthenticated Rollback Cancellation PoC, Patch Analysis & Rule
Medium CVE-2026-3143 in Boldgrid Backup (CVSS 5.3): Total Upkeep. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.17.2.
May 17, 2026
CVE-2026-42774: JetEngine <= 3.8.8.1 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-42774 in Jet Engine (CVSS 7.5): JetEngine. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 17, 2026
CVE-2026-3772: WP Editor <= 1.2.9.2 Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor PoC, Patch Analysis & Rule
High CVE-2026-3772 in Wp Editor (CVSS 8.8): WP Editor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.9.3.
May 17, 2026
CVE-2026-42651: Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42651 in Classified Listing (CVSS 4.3): Classified Listing – AI-Powered Classified ads & Business Directory Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.3.10.
May 17, 2026
CVE-2026-42659: AFI – The Easiest Integration Plugin <= 1.126.12 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42659 in Advanced Form Integration (CVSS 4.3): AFI – The Easiest Integration Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 17, 2026
CVE-2026-6127: Elementor Website Builder <= 4.0.4 Authenticated (Contributor+) Stored Cross-Site Scripting via REST API PoC, Patch Analysis & Rule
Medium CVE-2026-6127 in Elementor (CVSS 6.4): Elementor Website Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.5.
May 17, 2026
CVE-2026-42650: AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.6.7 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-42650 in Automatorwp (CVSS 7.2): AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
May 17, 2026
CVE-2026-42640: Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42640 in Classified Listing (CVSS 5.3): Classified Listing – AI-Powered Classified ads & Business Directory Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.3.9.
May 17, 2026
CVE-2026-42656: Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 Authenticated (Subscriber+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-42656 in Contest Gallery (CVSS 6.4): Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 29.0.0.
May 17, 2026
CVE-2026-42657: Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-42657 in Contest Gallery (CVSS 5.3): Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 29.0.0.
May 17, 2026
CVE-2026-42658: Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-42658 in Classified Listing (CVSS 7.2): Classified Listing – AI-Powered Classified ads & Business Directory Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.3.9.
May 17, 2026
CVE-2025-15484: Order Notification for WooCommerce – Get Audio Alert on new Orders < 3.6.3 Unauthenticated Remote Code Execution PoC, Patch Analysis & Rule
Critical CVE-2025-15484 in Woc Order Alert (CVSS 9.8): Order Notification for WooCommerce – Get Audio Alert on new Orders < 3.6.3 - Unauthenticated Remote.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF...
May 16, 2026
CVE-2026-6247: scratchblocks for WP <= 1.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'element' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6247 in Scratchblocks For Wp (CVSS 6.4): scratchblocks for WP. Atomic Edge summarizes impact, exploitability, and patch details.
May 16, 2026
CVE-2026-4935: OttoKit: All-in-One Automation Platform < 1.1.23 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-4935 in Suretriggers (CVSS 7.5): OttoKit: All-in-One Automation Platform < 1.1.23 - Unauthenticated SQL Injection. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.1.23.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.