AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 4, 2026
CVE-2026-6229: Royal Addons for Elementor <= 1.7.1057 Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter PoC, Patch Analysis & Rule
High CVE-2026-6229 in Royal Elementor Addons (CVSS 7.2): Royal Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.1058.
May 4, 2026
CVE-2026-4060: Geo Mashup <= 1.13.18 Unauthenticated Time-Based SQL Injection via 'sort' Parameter PoC, Patch Analysis & Rule
High CVE-2026-4060 in Geo Mashup (CVSS 7.5): Geo Mashup. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.13.19.
May 4, 2026
CVE-2026-2052: Widget Options <= 4.2.2 Authenticated (Contributor+) Remote Code Execution via Display Logic PoC, Patch Analysis & Rule
High CVE-2026-2052 in Extended Widget Options (CVSS 8.8): Widget Options. Atomic Edge summarizes impact, exploitability, and patch details.
May 4, 2026
CVE-2026-2554: WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.25 Authenticated (Vendor+) Insecure Direct Object Reference to Arbitrary User Deletion PoC, Patch Analysis & Rule
High CVE-2026-2554 in Wc Frontend Manager (CVSS 8.1): WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible. Atomic Edge summarizes impact, exploitability, and patch details. Update to 6.7.26.
May 4, 2026
CVE-2026-4061: Geo Mashup <= 1.13.18 Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter PoC, Patch Analysis & Rule
High CVE-2026-4061 in Geo Mashup (CVSS 7.5): Geo Mashup. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.13.19.
May 4, 2026
CVE-2026-4062: Geo Mashup <= 1.13.18 Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter PoC, Patch Analysis & Rule
High CVE-2026-4062 in Geo Mashup (CVSS 7.5): Geo Mashup. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.13.19.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Blockspare (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details.
May 4, 2026
CVE-2026-6447: Call for Price for WooCommerce <= 4.2.0 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for Price' Label Settings PoC, Patch Analysis & Rule
Medium CVE-2026-6447 in Woocommerce Call For Price (CVSS 4.4): Call for Price for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.3.0.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in B Blocks (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.0.19.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Menu Image (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.13.
May 4, 2026
CVE-2026-2052: Widget Options <= 4.2.2 Authenticated (Contributor+) Remote Code Execution via Display Logic PoC, Patch Analysis & Rule
High CVE-2026-2052 in Widget Options (CVSS 8.8): Widget Options. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.2.3.
May 4, 2026
CVE-2026-6446: My Social Feeds <= 1.0.4 Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action PoC, Patch Analysis & Rule
Medium CVE-2026-6446 in My Social Feeds (CVSS 5.4): My Social Feeds. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.5.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Master Addons (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.7.3.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Webba Booking Lite (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Ga For Wp (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.10.0.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Eazydocs (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.5.9.
May 4, 2026
CVE-2026-6963: WP Mail Gateway <= 1.8 Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification via 'wmg_save_provider_config' AJAX Action PoC, Patch Analysis & Rule
High CVE-2026-6963 in Wp Mail Gateway (CVSS 8.8): WP Mail Gateway. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.1.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Url Shortify (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.10.5.1.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Gpt3 Ai Content Generator (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.17.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Interactive Geo Maps (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.6.23.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.