AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Woo Coupon Usage (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.19.0.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Share This Image (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.08.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Music Player For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.4.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Events Addon For Elementor (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.2.5.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Spotlight Social Photo Feeds (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.7.1.
May 4, 2026
CVE-2024-13362: Freemius <= 2.10.1 Reflected DOM-Based Cross-Site Scripting via url Parameter PoC, Patch Analysis & Rule
Medium CVE-2024-13362 in Yet Another Stars Rating (CVSS 6.1): Freemius. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.4.15.
May 4, 2026
CVE-2026-2509: Page Builder: Pagelayer <= 2.0.8 Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-2509 in Pagelayer (CVSS 6.4): Page Builder: Pagelayer. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.0.9.
May 4, 2026
CVE-2026-3396: WCAPF – WooCommerce Ajax Product Filter <= 4.2.3 Unauthenticated Time-Based SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-3396 in Wc Ajax Product Filter (CVSS 7.5): WCAPF – WooCommerce Ajax Product Filter. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.3.0.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Post Grid And Filter Ultimate (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Ticker Ultimate (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Team Showcase And Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Featured Content And Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Countdown Timer Ultimate (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Trending Post Slider And Widget (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Blog And Widgets (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Sp Faq (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-39583: Datalogics Ecommerce Delivery – Datalogics <= 2.6.62 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2026-39583 in Datalogics (CVSS 9.8): Datalogics Ecommerce Delivery – Datalogics. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.6.63.
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Responsive Recent Post Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 28, 2026
CVE-2026-2519: Online Scheduling and Appointment Booking System – Bookly <= 27.0 Unauthenticated Price Manipulation via 'tips' PoC, Patch Analysis & Rule
Medium CVE-2026-2519 in Bookly Responsive Appointment Booking Tool (CVSS 5.3): Online Scheduling and Appointment Booking System – Bookly. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update...
April 28, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Timeline And History Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.