AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Sp Faq (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-39583: Datalogics Ecommerce Delivery – Datalogics <= 2.6.62 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2026-39583 in Datalogics (CVSS 9.8): Datalogics Ecommerce Delivery – Datalogics. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.6.63.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Responsive Recent Post Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-2519: Online Scheduling and Appointment Booking System – Bookly <= 27.0 Unauthenticated Price Manipulation via 'tips' PoC, Patch Analysis & Rule
Medium CVE-2026-2519 in Bookly Responsive Appointment Booking Tool (CVSS 5.3): Online Scheduling and Appointment Booking System – Bookly. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update...
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Timeline And History Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-39537: Mikado Core <= 1.6 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-39537 in Mikado Core (CVSS 8.1): Mikado Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-39546: MultiLoca <= 4.2.15 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-39546 in WooCommerce Multi Locations Inventory Management (CVSS 8.8): MultiLoca. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-39596: Blocksy Companion Pro < 2.1.29 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-39596 in Blocksy Companion Pro (CVSS 7.5): Blocksy Companion Pro < 2.1.29 - Unauthenticated SQL Injection. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-3574: Experto Dashboard for WooCommerce <= 1.0.4 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Navigation Font Size' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-3574 in Experto Custom Dashboard (CVSS 4.4): Experto Dashboard for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-39470: Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails < 2.1.0 Authenticated (Shop Manager+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-39470 in Woo Cart Abandonment Recovery (CVSS 7.2): Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails < 2.1.0 -.... Atomic Edge summarizes impact, exploitability, and patch details...
April 28, 2026
CVE-2026-39523: Solene Core <= 2.3.2 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-39523 in Solene Core (CVSS 8.1): Solene Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2025-6388: Spirit Framework <= 1.2.14 Authentication Bypass to Account Takeover and Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2025-6388 in Spirit Framework (CVSS 9.8): Spirit Framework. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2025-26966: Private Content <= 8.11.5 Unauthenticated Privilege Escalation via Account Takeover PoC, Patch Analysis & Rule
Critical CVE-2025-26966 in Private Content (CVSS 9.8): Private Content. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2025-53209: Masteriyo LMS PRO <= 2.20.0 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2025-53209 in Learning Management System Pro (CVSS 9.8): Masteriyo LMS PRO. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-4911: Booking Package <= 1.7.06 Unauthenticated Price Manipulation via 'amount' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-4911 in Booking Package (CVSS 5.3): Booking Package. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.7.08.
April 27, 2026
CVE-2026-6551: Timeline Blocks for Gutenberg <= 1.1.10 Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6551 in Timeline Blocks (CVSS 6.4): Timeline Blocks for Gutenberg. Atomic Edge summarizes impact, exploitability, and patch details.
April 27, 2026
CVE-2026-6725: WPC Smart Messages for WooCommerce <= 4.2.8 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6725 in Wpc Smart Messages (CVSS 6.4): WPC Smart Messages for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.2.9.
April 27, 2026
CVE-2026-6809: Social Post Embed <= 2.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed PoC, Patch Analysis & Rule
Medium CVE-2026-6809 in Social Post Embed (CVSS 6.4): Social Post Embed. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.0.2.
April 27, 2026
CVE-2026-39530: SpeakOut! Email Petitions <= 4.6.5 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-39530 in Speakout (CVSS 7.5): SpeakOut! Email Petitions. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.6.5.1.
April 27, 2026
CVE-2026-6741: LatePoint <= 5.4.1 Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability PoC, Patch Analysis & Rule
High CVE-2026-6741 in Latepoint (CVSS 8.8): LatePoint. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.4.2.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.