AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 11, 2026
CVE-2026-6813: Continually <= 4.3.1 Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually_embed_code' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6813 in Continually (CVSS 4.4): Continually. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-4663: iPOSpays Gateways WC <= 1.3.7 Unauthenticated Missing Authorization to Settings Update via REST API Endpoint PoC, Patch Analysis & Rule
Medium CVE-2026-4663 in Ipospays Gateways Wc (CVSS 5.3): iPOSpays Gateways WC. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-4301: Rate Star Review Vote <= 1.6.4 Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-4301 in Rate Star Review (CVSS 4.3): Rate Star Review Vote. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-2300: BJ Lazy Load <= 1.0.9 Authenticated (Contributor+) Stored Cross-Site Scripting via Custom HTML Block PoC, Patch Analysis & Rule
Medium CVE-2026-2300 in Bj Lazy Load (CVSS 6.4): BJ Lazy Load. Atomic Edge summarizes impact, exploitability, and patch details.
May 11, 2026
CVE-2026-4920: Next Date <= 1.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'default' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-4920 in Nextdate (CVSS 6.4): Next Date. Atomic Edge summarizes impact, exploitability, and patch details.
May 11, 2026
CVE-2026-2993: AI Chatbot & Workflow Automation by AIWU <= 1.4.17 Unauthenticated SQL Injection in getListForTbl() PoC, Patch Analysis & Rule
High CVE-2026-2993 in Ai Copilot Content Generator (CVSS 7.5): AI Chatbot & Workflow Automation by AIWU. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-4859: SP Blog Designer <= 1.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-4859 in Sp Blog Designer (CVSS 6.4): SP Blog Designer. Atomic Edge summarizes impact, exploitability, and patch details.
May 11, 2026
CVE-2026-6932: Woo Commerce Minimum Weight <= 3.0.1 Cross-Site Request Forgery via Settings Update Form PoC, Patch Analysis & Rule
Medium CVE-2026-6932 in Woo Commerce Min Weight (CVSS 4.3): Woo Commerce Minimum Weight. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-7437: AzonPost <= 1.3 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-7437 in Azonpost (CVSS 6.1): AzonPost. Atomic Edge summarizes impact, exploitability, and patch details.
May 11, 2026
CVE-2026-7464: WP Google Maps Integration <= 1.2 Reflected Cross-Site Scripting via 'page' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-7464 in Wp Google Maps Integration (CVSS 6.1): WP Google Maps Integration. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-6663: GWD Connect <= 2.9 Unauthenticated Limited Code Execution via update_agent PoC, Patch Analysis & Rule
Medium CVE-2026-6663 in Graphic Web Design Inc (CVSS 4.8): GWD Connect. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-7616: Zawgyi Embed <= 2.1.1 Cross-Site Request Forgery via 'zawgyi_forceCSS' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-7616 in Zawgyi Embed (CVSS 4.3): Zawgyi Embed. Atomic Edge summarizes impact, exploitability, and patch details.
May 11, 2026
CVE-2026-7626: Slek Gateway for WooCommerce <= 1.0 Unauthenticated Insufficiently Protected Credentials via Payment Redirect Form Hidden Fields PoC, Patch Analysis & Rule
Medium CVE-2026-7626 in Slek Gateway For Woocommerce (CVSS 5.3): Slek Gateway for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details.
May 11, 2026
CVE-2026-6808: Pricing Tables for WP <= 1.1.0 Reflected Cross-Site Scripting via 'page' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6808 in Awesome Pricing Tables Lite By Optimalplugins (CVSS 6.1): Pricing Tables for WP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-7562: WP-Redirection <= 1.0.3 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-7562 in Wp Redirection (CVSS 4.3): WP-Redirection. Atomic Edge summarizes impact, exploitability, and patch details.
May 11, 2026
CVE-2026-7561: Tm – WordPress Redirection <= 1.2 Cross-Site Request Forgery to Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-7561 in Tm Wordpress Redirection (CVSS 6.1): Tm – WordPress Redirection. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 11, 2026
CVE-2026-7050: Forms Rb <= 1.1.9 Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via 'form_id' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-7050 in Forms Rb (CVSS 4.3): Forms Rb. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 10, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Product Layouts (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.3.5.
May 10, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Send Users Email (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.6.2.
May 10, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Embedder For Google Reviews (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.5.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.