AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
April 27, 2026
CVE-2026-39513: Easy Appointments <= 3.12.21 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-39513 in Easy Appointments (CVSS 5.3): Easy Appointments. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.12.22.
April 27, 2026
CVE-2026-39463: ManageWP Worker <= 4.9.31 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-39463 in Worker (CVSS 7.2): ManageWP Worker. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.9.32.
April 27, 2026
CVE-2026-39512: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.152 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-39512 in Geodirectory (CVSS 7.5): GeoDirectory – WP Business Directory Plugin and Classified Listings Directory. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.8.154.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Featured Post Creative (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Testimonial With Widget (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Popup Anything On Click (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Html5 Videogallery Plus Player (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Album And Image Gallery Plus Lightbox (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Blog Designer For Post And Widget (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Portfolio And Projects (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Meta Slider And Carousel With Lightbox (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Slick Slider And Image Carousel (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Logo Showcase Responsive Slider Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Sp News And Widget (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2025-54693: Form Block <= 1.5.5 Unauthenticated Arbitrary File Upload PoC, Patch Analysis & Rule
Critical CVE-2025-54693 in Form Block (CVSS 9.8): Form Block. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.5.6.
April 26, 2026
CVE-2026-7106: Highland Software Custom Role Manager <= 1.0.0 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-7106 in Highland Software Custom Role Manager (CVSS 8.8): Highland Software Custom Role Manager. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.0.1.
April 26, 2026
CVE-2025-53444: UserPro Community and User Profile WordPress Plugin < 5.1.11 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-53444 in Userpro (CVSS 4.3): UserPro - Community and User Profile WordPress Plugin < 5.1.11 - Cross-Site Request Forgery. Atomic Edge summarizes impact, exploitability, and patch details.
April 26, 2026
CVE-2026-40724: Client Portal (Pro) <= 5.6.2 Authenticated (CP Client+) Arbitrary File Download PoC, Patch Analysis & Rule
Medium CVE-2026-40724 in Leco Client Portal (CVSS 6.5): Client Portal (Pro). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 26, 2026
CVE-2025-15635: Smart Online Order for Clover <= 1.6.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-15635 in Clover Online Orders (CVSS 4.3): Smart Online Order for Clover. Atomic Edge summarizes impact, exploitability, and patch details.
April 26, 2026
CVE-2026-39540: Shipment Tracker for Woocommerce <= 1.5.3.2 Authenticated (Subscriber+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-39540 in Shipment Tracker For Woocommerce (CVSS 6.4): Shipment Tracker for Woocommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.