AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Bulk Image Alt Text With Yoast (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Open User Map (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.4.1.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Tripetto (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Automatic Youtube Gallery (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.5.6.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Streamweasels Twitch Integration (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Integrate Google Drive (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-4650: FundPress <= 2.0.8 Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler PoC, Patch Analysis & Rule
Medium CVE-2026-4650 in Fundpress (CVSS 5.3): FundPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.9.
May 4, 2026
CVE-2026-6817: Quiz Maker by AYS <= 6.7.1.29 Unauthenticated Stored Cross-Site Scripting via 'rate_reason' PoC, Patch Analysis & Rule
Medium CVE-2026-6817 in Quiz Maker (CVSS 5.8): Quiz Maker by AYS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.7.1.30.
May 4, 2026
CVE-2026-6320: Salon Booking System – Free Version <= 10.30.25 Unauthenticated Arbitrary File Read via Booking File Field Path Traversal PoC, Patch Analysis & Rule
High CVE-2026-6320 in Salon Booking System (CVSS 7.5): Salon Booking System – Free Version. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-6449: Booking for Appointments and Events Calendar – Amelia <= 2.1.2 Unauthenticated Authorization Bypass via Remote Approval Endpoint PoC, Patch Analysis & Rule
Medium CVE-2026-6449 in Ameliabooking (CVSS 5.3): Booking for Appointments and Events Calendar – Amelia. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.3.
May 4, 2026
CVE-2026-4790: Premium Addons for Elementor <= 4.11.70 Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-4790 in Premium Addons For Elementor (CVSS 5.4): Premium Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.11.71.
May 4, 2026
CVE-2026-7649: ARMember <= 4.0.60 Unauthenticated SQL Injection via 'orderby' Parameter PoC, Patch Analysis & Rule
High CVE-2026-7649 in Armember Membership (CVSS 7.5): ARMember. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-4024: Royal Addons for Elementor <= 1.7.1056 Missing Authorization to Unauthenticated Form Action Meta Modification PoC, Patch Analysis & Rule
Medium CVE-2026-4024 in Royal Elementor Addons (CVSS 5.3): Royal Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.1057.
May 4, 2026
CVE-2026-7647: Profile Builder Pro <= 3.14.5 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2026-7647 in Profile Builder Pro (CVSS 8.1): Profile Builder Pro. Atomic Edge summarizes impact, exploitability, and patch details.
May 4, 2026
CVE-2026-5324: Brizy – Page Builder <= 2.8.11 Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value PoC, Patch Analysis & Rule
High CVE-2026-5324 in Brizy (CVSS 7.2): Brizy – Page Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.8.12.
May 4, 2026
CVE-2026-6457: Geo Mashup <= 1.13.19 Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-6457 in Geo Mashup (CVSS 6.5): Geo Mashup. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.13.20.
May 4, 2026
CVE-2026-7049: PixelYourSite Pro <= 12.5.0.1 Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter PoC, Patch Analysis & Rule
High CVE-2026-7049 in Pixelyoursite Pro (CVSS 7.2): PixelYourSite Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-7641: Import and export users and customers <= 2.0.8 Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields PoC, Patch Analysis & Rule
High CVE-2026-7641 in Import Users From Csv With Meta (CVSS 8.8): Import and export users and customers. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.0.9.
May 4, 2026
CVE-2026-4882: User Registration Advanced Fields <= 1.6.20 Unauthenticated Arbitrary File Upload PoC, Patch Analysis & Rule
Critical CVE-2026-4882 in User Registration Advanced Fields (CVSS 9.8): User Registration Advanced Fields. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
May 4, 2026
CVE-2026-7638: App Builder <= 5.5.10 Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Avatar Modification via 'user_id' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-7638 in App Builder (CVSS 5.3): App Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.