AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
April 6, 2026
CVE-2026-25435: Booking calendar, Appointment Booking System <= 3.2.36 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-25435 in Booking Calendar (CVSS 7.2): Booking calendar, Appointment Booking System. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-25398: Vertex Addons for Elementor <= 1.6.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25398 in Addons For Elementor Builder (CVSS 4.3): Vertex Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.0.
April 6, 2026
CVE-2026-25365: Kargo Takip < 0.2.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25365 in Kargo Takip Turkiye (CVSS 4.3): Kargo Takip < 0.2.4 - Missing Authorization. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.2.4.
April 6, 2026
CVE-2026-25312: EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25312 in Eventprime Event Calendar Management (CVSS 5.3): EventPrime – Events Calendar, Bookings and Tickets. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.8.4.
April 6, 2026
CVE-2026-25445: Wishlist Member <= 3.29.0 Authenticated (Subscriber+) PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2026-25445 in Wishlist Member X (CVSS 7.5): Wishlist Member. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-25438: Gutenberg Blocks – Unlimited blocks For Gutenberg <= 1.2.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25438 in Unlimited Blocks (CVSS 6.1): Gutenberg Blocks – Unlimited blocks For Gutenberg. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-24376: WPVulnerability <= 4.2.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24376 in Wpvulnerability (CVSS 4.3): WPVulnerability. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.2.1.1.
April 6, 2026
CVE-2026-25446: Wishlist Member <= 3.29.0 Authenticated (Subscriber+) Arbitrary File Upload PoC, Patch Analysis & Rule
High CVE-2026-25446 in Wishlist Member X (CVSS 8.8): Wishlist Member. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-32565: Contextual Related Posts < 4.2.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32565 in Contextual Related Posts (CVSS 5.3): Contextual Related Posts < 4.2.2 - Missing Authorization. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.2.
April 6, 2026
CVE-2026-25430: Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25430 in Cf7 Mailchimp (CVSS 4.3): Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.3.
April 6, 2026
CVE-2026-25013: Phox Hosting <= 2.0.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25013 in Phox Host (CVSS 6.1): Phox Hosting. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-24989: SUMO Affiliates Pro < 11.4.0 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2026-24989 in Affs (CVSS 8.1): SUMO Affiliates Pro < 11.4.0 - Unauthenticated PHP Object Injection. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-25317: Print Invoice & Delivery Notes for WooCommerce <= 5.9.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25317 in Woocommerce Delivery Notes (CVSS 5.3): Print Invoice & Delivery Notes for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.0.0.
April 6, 2026
CVE-2026-24362: Ultimate Post Kit Addons for Elementor <= 4.0.21 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24362 in Ultimate Post Kit (CVSS 4.3): Ultimate Post Kit Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.22.
April 6, 2026
CVE-2026-25429: Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 1.1.1 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2026-25429 in Nexa Blocks (CVSS 8.1): Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-25306: XStore Core <= 5.6.4 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25306 in Et Core Plugin (CVSS 6.1): XStore Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-25447: Widget Wrangler <= 2.3.9 Authenticated (Author+) Remote Code Execution PoC, Patch Analysis & Rule
High CVE-2026-25447 in Widget Wrangler (CVSS 8.8): Widget Wrangler. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 6, 2026
CVE-2026-24993: Advanced Reporting & Statistics for WooCommerce – Orders, Products & Customers Reporting <= 4.1.3 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-24993 in Webd Woocommerce Advanced Reporting Statistics (CVSS 7.5): Advanced Reporting & Statistics for WooCommerce – Orders, Products & Customers Reporting. Atomic Edge summarizes impact, exploitability, and patch...
April 6, 2026
CVE-2026-24378: EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.0 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2026-24378 in Eventprime Event Calendar Management (CVSS 8.1): EventPrime – Events Calendar, Bookings and Tickets. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.2.8.1.
April 6, 2026
CVE-2026-25437: GZSEO <= 2.0.14 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25437 in Gzseo (CVSS 5.3): GZSEO. Atomic Edge summarizes impact, exploitability, and patch details.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.