AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
July 7, 2026
CVE-2026-14495: DoLogin Security <= 4.3 Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Token PoC, Patch Analysis & Rule
High CVE-2026-14495 in Dologin (CVSS 8.8): DoLogin Security. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 7, 2026
CVE-2026-12041: Chatra Live Chat + ChatBot + Cart Saver <= 1.0.12 Authenticated (Administrator+) Stored Cross-Site Scripting via 'chatra-code' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-12041 in Chatra Live Chat (CVSS 4.4): Chatra Live Chat + ChatBot + Cart Saver. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 7, 2026
CVE-2025-14169: FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2025-14169 in Funnel Builder (CVSS 7.5): FunnelKit – Funnel Builder for WooCommerce Checkout. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.13.1.6.
July 6, 2026
CVE-2026-14345: WPFunnels <= 3.12.7 Unauthenticated Remote Code Execution via 'postData' Parameter PoC, Patch Analysis & Rule
Critical CVE-2026-14345 in Wpfunnels (CVSS 9.8): WPFunnels. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.12.8.
July 6, 2026
CVE-2025-64636: Donation Thermometer <= 2.2.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-64636 in Donation Thermometer (CVSS 5.3): Donation Thermometer. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.2.8.
July 6, 2026
CVE-2026-11328: Exclusive Addons for Elementor <= 2.7.9.8 Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title PoC, Patch Analysis & Rule
Medium CVE-2026-11328 in Exclusive Addons For Elementor (CVSS 6.4): Exclusive Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.7.9.9.
July 6, 2026
CVE-2026-57665: GravityView <= 3.0.0 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-57665 in Gravityview (CVSS 5.3): GravityView. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 6, 2026
CVE-2026-6101: AMP for WP <= 1.1.12 Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload PoC, Patch Analysis & Rule
High CVE-2026-6101 in Accelerated Mobile Pages (CVSS 7.5): AMP for WP. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.1.13.
July 6, 2026
CVE-2026-57651: Ghost Kit – Page Builder Blocks, Motion Effects & Extensions <= 3.6.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-57651 in Ghostkit (CVSS 6.4): Ghost Kit – Page Builder Blocks, Motion Effects & Extensions. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.6.1.
July 6, 2026
CVE-2026-57655: Child Theme Wizard <= 1.4 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-57655 in Child Theme Wizard (CVSS 4.3): Child Theme Wizard. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.5.
July 6, 2026
CVE-2025-63079: Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-63079 in Live Copy Paste (CVSS 4.3): Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.5.4.
July 6, 2026
CVE-2025-68064: Goya Core < 1.0.9.4 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2025-68064 in Goya Core (CVSS 7.5): Goya Core < 1.0.9.4 - Authenticated (Contributor+) Local File Inclusion. Atomic Edge summarizes impact, exploitability, and patch details.
July 6, 2026
CVE-2025-68074: Image Carousel <= 1.0.0.41 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68074 in Image Carousel (CVSS 6.4): Image Carousel. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 6, 2026
CVE-2026-57635: FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-57635 in Funnelkit Stripe Woo Payment Gateway (CVSS 4.3): FunnelKit Payment Gateway for Stripe WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.14.0.4.
July 6, 2026
CVE-2025-66123: BookPro Appointment Booking WordPress Plugin <= 1.1.0 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2025-66123 in Ovabookpro (CVSS 5.3): BookPro - Appointment Booking WordPress Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 6, 2026
CVE-2025-68075: BNE Testimonials <= 2.0.8 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68075 in Bne Testimonials (CVSS 6.4): BNE Testimonials. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 6, 2026
CVE-2026-57657: Gmail SMTP <= 1.2.3.19 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-57657 in Gmail Smtp (CVSS 4.3): Gmail SMTP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 6, 2026
CVE-2026-9709: Cornerstone < 7.8.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-9709 in Cornerstone (CVSS 4.3): Cornerstone < 7.8.9 - Missing Authorization. Atomic Edge summarizes impact, exploitability, and patch details.
July 6, 2026
CVE-2026-57659: Paid Memberships Pro Add Member From Admin <= 0.7.2 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-57659 in Pmpro Add Member Admin (CVSS 4.3): Paid Memberships Pro - Add Member From Admin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 6, 2026
CVE-2026-56044: Blog2Social: Social Media Auto Post & Scheduler <= 8.9.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-56044 in Blog2social (CVSS 7.2): Blog2Social: Social Media Auto Post & Scheduler. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.9.3.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.