AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
April 24, 2026
CVE-2026-6703: Responsive Blocks <= 2.2.1 Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions PoC, Patch Analysis & Rule
Medium CVE-2026-6703 in Responsive Block Editor Addons (CVSS 4.3): Responsive Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.2.2.
April 23, 2026
CVE-2026-4133: TextP2P Texting Widget <= 1.7 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-4133 in Textp2p Texting Widget (CVSS 4.3): TextP2P Texting Widget. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-4279: Bread & Butter: Content Gating for Verified Leads <= 8.2.0.25 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4279 in Bread Butter (CVSS 6.4): Bread & Butter: Content Gating for Verified Leads. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-4121: Kcaptcha <= 1.0.1 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-4121 in Kcaptcha (CVSS 4.3): Kcaptcha. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-4089: Twittee Text Tweet <= 1.0.8 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-4089 in Twittee Text Tweet (CVSS 6.4): Twittee Text Tweet. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-4118: Call To Action Plugin <= 3.1.3 Cross-Site Request Forgery via Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-4118 in Call To Action Plugin (CVSS 4.3): Call To Action Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-4353: CI HUB Connector <= 1.2.106 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-4353 in Ci Hub Connector (CVSS 6.4): CI HUB Connector. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-4076: Slider Bootstrap Carousel <= 1.0.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4076 in Slider Bootstrap Carousel (CVSS 6.4): Slider Bootstrap Carousel. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-4085: Easy Social Photos Gallery <= 3.1.2 Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper_class' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-4085 in My Instagram Feed (CVSS 6.4): Easy Social Photos Gallery. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-4088: Switch CTA Box <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-4088 in Switch Cta Box (CVSS 6.4): Switch CTA Box. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-1913: Gallagher Website Design <= 2.6.4 Authenticated (Contributor+) Stored Cross-Site Scripting via 'prefix' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1913 in Gallagher Website Design (CVSS 6.4): Gallagher Website Design. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.6.5.
April 23, 2026
CVE-2026-3361: WP Store Locator <= 2.2.261 Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Meta PoC, Patch Analysis & Rule
Medium CVE-2026-3361 in Wp Store Locator (CVSS 6.4): WP Store Locator. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.3.0.
April 23, 2026
CVE-2026-3844: Breeze Cache <= 2.4.4 Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote PoC, Patch Analysis & Rule
Critical CVE-2026-3844 in Breeze (CVSS 9.8): Breeze Cache. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.5.
April 23, 2026
CVE-2026-1923: Social Rocket – Social Sharing Plugin <= 1.3.4.2 Authenticated (Subscriber+) Stored Cross-Site Scripting via id PoC, Patch Analysis & Rule
Medium CVE-2026-1923 in Social Rocket (CVSS 6.4): Social Rocket – Social Sharing Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.5.
April 23, 2026
CVE-2026-1930: Emailchef <= 3.5.1 Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-1930 in Emailchef (CVSS 4.3): Emailchef. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.5.2.
April 23, 2026
CVE-2026-1845: Real Estate Pro <= 1.0.9 Authenticated (Admin+) Stored Cross-Site Scripting via Settings PoC, Patch Analysis & Rule
Medium CVE-2026-1845 in Re Pro (CVSS 5.5): Real Estate Pro. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-5464: ExactMetrics <= 9.1.2 Authenticated (Editor+) Arbitrary Plugin Installation/Activation via exactmetrics_connect_process PoC, Patch Analysis & Rule
High CVE-2026-5464 in Google Analytics Dashboard For Wp (CVSS 7.2): ExactMetrics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 9.1.3.
April 23, 2026
CVE-2026-1395: Gutentools <= 1.1.3 Authenticated (Contributor+) Stored Cross-Site Scripting via Post Slider Block Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1395 in Gutentools (CVSS 6.4): Gutentools. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.1.4.
April 23, 2026
CVE-2026-3362: Short Comment Filter <= 2.2 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Minimum Count' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-3362 in Short Comment Filter (CVSS 4.4): Short Comment Filter. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-2719: Private WP suite <= 0.4.1 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Exceptions' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-2719 in Private Wp Suite (CVSS 4.4): Private WP suite. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.