AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
April 25, 2026
CVE-2025-5955: Service Finder SMS System <= 2.0.0 Authentication Bypass PoC, Patch Analysis & Rule
High CVE-2025-5955 in Aone Sms (CVSS 8.1): Service Finder SMS System. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 24, 2026
CVE-2026-4139: mCatFilter <= 0.5.2 Cross-Site Request Forgery via compute_post() Function PoC, Patch Analysis & Rule
Medium CVE-2026-4139 in Mcatfilter (CVSS 4.3): mCatFilter. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 24, 2026
CVE-2026-4082: ER Swiffy Insert <= 1.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4082 in Er Swiffy Insert (CVSS 6.4): ER Swiffy Insert. Atomic Edge summarizes impact, exploitability, and patch details.
April 24, 2026
CVE-2026-4125: WPMK Block <= 1.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4125 in Wpmk Block (CVSS 6.4): WPMK Block. Atomic Edge summarizes impact, exploitability, and patch details.
April 24, 2026
CVE-2026-4138: DX Unanswered Comments <= 1.7 Cross-Site Request Forgery via Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-4138 in Dx Unanswered Comments (CVSS 4.3): DX Unanswered Comments. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.
April 24, 2026
CVE-2026-4140: Ni WooCommerce Order Export <= 3.1.6 Cross-Site Request Forgery to Settings Update via ni_order_export_action AJAX Action PoC, Patch Analysis & Rule
Medium CVE-2026-4140 in Ni Woocommerce Order Export (CVSS 4.3): Ni WooCommerce Order Export. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 24, 2026
CVE-2026-4142: Sentence To SEO (keywords, description and tags) <= 1.0 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Permanent keywords' Field PoC, Patch Analysis & Rule
Medium CVE-2026-4142 in Sentence To Seo (CVSS 4.4): Sentence To SEO (keywords, description and tags). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 24, 2026
CVE-2026-4280: Breaking News WP <= 1.3 Missing Authorization to Authenticated (Subscriber+) Local File Inclusion/Read PoC, Patch Analysis & Rule
Medium CVE-2026-4280 in Breaking News Wp (CVSS 6.5): Breaking News WP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 24, 2026
CVE-2026-4074: Quran Live Multilanguage <= 1.0.3 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4074 in Quran Live (CVSS 6.4): Quran Live Multilanguage. Atomic Edge summarizes impact, exploitability, and patch details.
April 24, 2026
CVE-2026-6396: Fast & Fancy Filter – 3F <= 1.2.2 Cross-Site Request Forgery to Settings Modification via fff_save_settins AJAX Action PoC, Patch Analysis & Rule
Medium CVE-2026-6396 in Fast Fancy Filter 3f (CVSS 4.3): Fast & Fancy Filter – 3F. Atomic Edge summarizes impact, exploitability, and patch details.
April 24, 2026
CVE-2026-6041: Buzz Comments <= 0.9.4 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Buzz Avatar' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-6041 in Buzz Comments (CVSS 4.4): Buzz Comments. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 24, 2026
CVE-2026-6236: Posts map <= 0.1.3 Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6236 in Posts Map (CVSS 6.4): Posts map. Atomic Edge summarizes impact, exploitability, and patch details.
April 24, 2026
CVE-2026-5820: Zypento Blocks <= 1.0.6 Authenticated (Author+) Stored Cross-Site Scripting via Table of Contents Block PoC, Patch Analysis & Rule
Medium CVE-2026-5820 in Zypento Blocks (CVSS 6.4): Zypento Blocks. Atomic Edge summarizes impact, exploitability, and patch details.
April 24, 2026
CVE-2026-5767: SlideShowPro SC <= 1.0.2 Authenticated (Contributor+) Stored Cross-Site Scripting via 'album' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-5767 in Slideshowpro Shortcode (CVSS 6.4): SlideShowPro SC. Atomic Edge summarizes impact, exploitability, and patch details.
April 24, 2026
CVE-2026-6294: Google PageRank Display <= 1.4 Cross-Site Request Forgery to Settings Update via Settings Page PoC, Patch Analysis & Rule
Medium CVE-2026-6294 in Google Pagerank Display (CVSS 4.3): Google PageRank Display. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 24, 2026
CVE-2024-7083: Email Encoder – Protect Email Addresses and Phone Numbers < 2.3.4 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2024-7083 in Email Encoder Bundle (CVSS 4.4): Email Encoder – Protect Email Addresses and Phone Numbers < 2.3.4 - Authenticated (Administrator+).... Atomic Edge summarizes impact, exploitability, and patch details. Update...
April 24, 2026
CVE-2026-6235: Sendmachine for WordPress <= 1.0.20 Unauthenticated SMTP Hijack to Privilege Escalation via manage_admin_requests PoC, Patch Analysis & Rule
Critical CVE-2026-6235 in Sendmachine (CVSS 9.8): Sendmachine for WordPress. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.0.0.
April 24, 2026
CVE-2026-5748: Text Snippets <= 0.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'w' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-5748 in Text Snippet (CVSS 6.4): Text Snippets. Atomic Edge summarizes impact, exploitability, and patch details.
April 24, 2026
CVE-2026-6246: Simple Random Posts Shortcode <= 0.3 Authenticated (Contributor+) Stored Cross-Site Scripting via 'container_right_width' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-6246 in Simple Random Posts Shortcode (CVSS 6.4): Simple Random Posts Shortcode. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 24, 2026
CVE-2026-6712: Website LLMs.txt <= 8.2.6 Authenticated (Admin+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-6712 in Website Llms Txt (CVSS 4.4): Website LLMs.txt. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.2.7.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.