AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
April 1, 2026
CVE-2026-5130: Debugger & Troubleshooter <= 1.3.2 Unauthenticated Privilege Escalation to Administrator via Cookie Manipulation PoC, Patch Analysis & Rule
High CVE-2026-5130 in Debugger Troubleshooter (CVSS 8.8): Debugger & Troubleshooter. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.4.0.
April 1, 2026
CVE-2026-3300: Everest Forms Pro <= 1.9.12 Unauthenticated Remote Code Execution via Calculation Field PoC, Patch Analysis & Rule
Critical CVE-2026-3300 in Everest Forms Pro (CVSS 9.8): Everest Forms Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 1, 2026
CVE-2026-32541: Premmerce Redirect Manager <= 1.0.12 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32541 in Premmerce Redirect Manager (CVSS 4.3): Premmerce Redirect Manager. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.13.
April 1, 2026
CVE-2026-25346: FAQ Builder AYS <= 1.8.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-25346 in Faq Builder Ays (CVSS 7.2): FAQ Builder AYS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.3.
April 1, 2026
CVE-2026-32537: Visual Portfolio, Photo Gallery & Post Grid <= 3.5.1 Authenticated (Subscriber+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-32537 in Visual Portfolio (CVSS 7.5): Visual Portfolio, Photo Gallery & Post Grid. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.2.
April 1, 2026
CVE-2026-25371: Lumise Product Designer < 2.0.9 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-25371 in Lumise (CVSS 7.5): Lumise Product Designer < 2.0.9 - Unauthenticated SQL Injection. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 1, 2026
CVE-2026-4257: Contact Form by Supsystic <= 1.7.36 Unauthenticated Server-Side Template Injection via Prefill Functionality PoC, Patch Analysis & Rule
Critical CVE-2026-4257 in Contact Form By Supsystic (CVSS 9.8): Contact Form by Supsystic. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.8.0.
March 30, 2026
CVE-2026-32520: RewardsWP – Loyalty Points & Referral Program for WooCommerce <= 1.0.4 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2026-32520 in Rewardswp (CVSS 9.8): RewardsWP – Loyalty Points & Referral Program for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.5.
March 30, 2026
CVE-2026-3339: Keep Backup Daily <= 2.1.1 Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameter PoC, Patch Analysis & Rule
Low CVE-2026-3339 in Keep Backup Daily (CVSS 2.7): Keep Backup Daily. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.1.3.
March 30, 2026
CVE-2026-32542: Avada (Fusion) Builder < 3.15.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-32542 in Fusion Builder (CVSS 6.1): Avada (Fusion) Builder < 3.15.0 - Reflected Cross-Site Scripting. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 30, 2026
CVE-2026-3577: Keep Backup Daily <= 2.1.2 Authenticated (Admin+) Stored Cross-Site Scripting via Backup Title PoC, Patch Analysis & Rule
Medium CVE-2026-3577 in Keep Backup Daily (CVSS 4.4): Keep Backup Daily. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.1.3.
March 30, 2026
CVE-2026-32498: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.6 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32498 in Custom Registration Form Builder With Submission Manager (CVSS 5.3): RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login. Atomic Edge summarizes impact, exploitability...
March 30, 2026
CVE-2026-25361: Event Booking Manager for WooCommerce <= 5.1.4 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25361 in Mage Eventpress (CVSS 6.1): Event Booking Manager for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 30, 2026
CVE-2026-32499: WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 7.7.9 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2026-32499 in Chatbot (CVSS 7.5): WPBot – AI ChatBot for Live Support, Lead Generation, AI Services. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 7.8.0.
March 30, 2026
CVE-2026-3567: RepairBuddy <= 4.1132 Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action PoC, Patch Analysis & Rule
Medium CVE-2026-3567 in Computer Repair Shop (CVSS 5.3): RepairBuddy. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.1133.
March 30, 2026
CVE-2026-2430: Autoptimize <= 3.1.14 Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-2430 in Autoptimize (CVSS 6.4): Autoptimize. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.1.15.
March 30, 2026
CVE-2026-2352: Autoptimize <= 3.1.14 Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value PoC, Patch Analysis & Rule
Medium CVE-2026-2352 in Autoptimize (CVSS 6.4): Autoptimize. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.1.15.
March 30, 2026
CVE-2026-32546: Membership Plugin – Restrict Content <= 3.2.22 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32546 in Restrict Content (CVSS 5.3): Membership Plugin – Restrict Content. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.2.23.
March 30, 2026
CVE-2026-32494: Image Slider by Ays- Responsive Slider and Carousel <= 2.7.1 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-32494 in Ays Slider (CVSS 7.2): Image Slider by Ays- Responsive Slider and Carousel. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.7.2.
March 30, 2026
CVE-2026-32522: WooCommerce Support Ticket System < 18.5 Unauthenticated Arbitrary File Deletion PoC, Patch Analysis & Rule
Critical CVE-2026-32522 in Woocommerce Support Ticket System (CVSS 9.1): WooCommerce Support Ticket System < 18.5 - Unauthenticated Arbitrary File Deletion. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.