AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Cf7 Styler (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.1.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Primary Addon For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.5.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Widget For Eventbrite Api (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.1.11.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Bp Better Messages (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.7.0.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Wp Books Gallery (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.7.6.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Woo Coupon Usage (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.19.0.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Share This Image (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.08.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Music Player For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.4.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Events Addon For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.2.5.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Spotlight Social Photo Feeds (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.1.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Yet Another Stars Rating (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.4.15.
May 4, 2026
CVE-2026-2509: Page Builder: Pagelayer <= 2.0.8 Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-2509 in Pagelayer (CVSS 6.4): Page Builder: Pagelayer. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.0.9.
May 4, 2026
CVE-2026-3396: WCAPF – WooCommerce Ajax Product Filter <= 4.2.3 Unauthenticated Time-Based SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-3396 in Wc Ajax Product Filter (CVSS 7.5): WCAPF – WooCommerce Ajax Product Filter. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.3.0.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Post Grid And Filter Ultimate (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Ticker Ultimate (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Team Showcase And Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Featured Content And Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Countdown Timer Ultimate (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Trending Post Slider And Widget (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Blog And Widgets (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.