AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Popup Anything On Click (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Html5 Videogallery Plus Player (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Album And Image Gallery Plus Lightbox (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Blog Designer For Post And Widget (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Portfolio And Projects (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Meta Slider And Carousel With Lightbox (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Slick Slider And Image Carousel (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Wp Logo Showcase Responsive Slider Slider (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2026-6443: Essentialplugin Plugins (Various Versions) Injected Backdoor PoC, Patch Analysis & Rule
Critical CVE-2026-6443 in Sp News And Widget (CVSS 9.8): Essentialplugin Plugins (Various Versions) - Injected Backdoor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 27, 2026
CVE-2025-54693: Form Block <= 1.5.5 Unauthenticated Arbitrary File Upload PoC, Patch Analysis & Rule
Critical CVE-2025-54693 in Form Block (CVSS 9.8): Form Block. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.5.6.
April 26, 2026
CVE-2026-7106: Highland Software Custom Role Manager <= 1.0.0 Authenticated (Subscriber+) Privilege Escalation PoC, Patch Analysis & Rule
High CVE-2026-7106 in Highland Software Custom Role Manager (CVSS 8.8): Highland Software Custom Role Manager. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.0.1.
April 26, 2026
CVE-2025-53444: UserPro Community and User Profile WordPress Plugin < 5.1.11 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-53444 in Userpro (CVSS 4.3): UserPro - Community and User Profile WordPress Plugin < 5.1.11 - Cross-Site Request Forgery. Atomic Edge summarizes impact, exploitability, and patch details.
April 26, 2026
CVE-2026-40724: Client Portal (Pro) <= 5.6.2 Authenticated (CP Client+) Arbitrary File Download PoC, Patch Analysis & Rule
Medium CVE-2026-40724 in Leco Client Portal (CVSS 6.5): Client Portal (Pro). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 26, 2026
CVE-2025-15635: Smart Online Order for Clover <= 1.6.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-15635 in Clover Online Orders (CVSS 4.3): Smart Online Order for Clover. Atomic Edge summarizes impact, exploitability, and patch details.
April 26, 2026
CVE-2026-39540: Shipment Tracker for Woocommerce <= 1.5.3.2 Authenticated (Subscriber+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-39540 in Shipment Tracker For Woocommerce (CVSS 6.4): Shipment Tracker for Woocommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 26, 2026
CVE-2026-40725: WooCommerce Product Filters < 2.0.6 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2026-40725 in Woocommerce Product Filters (CVSS 8.1): WooCommerce Product Filters < 2.0.6 - Unauthenticated PHP Object Injection. Atomic Edge summarizes impact, exploitability, and patch details.
April 26, 2026
CVE-2025-15636: Video Gallery – YouTube Gallery & Responsive Video Playlist <= 3.5.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-15636 in Youtube Showcase (CVSS 6.4): Video Gallery – YouTube Gallery & Responsive Video Playlist. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.2.
April 26, 2026
CVE-2026-6372: Accept Cryptocurrencies with Plisio <= 2.0.6 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-6372 in Plisio Payment Gateway For Woocommerce (CVSS 5.3): Accept Cryptocurrencies with Plisio. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 26, 2026
CVE-2025-63029: WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.7.1 Authenticated (Store vendor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2025-63029 in Wc Multivendor Marketplace (CVSS 6.5): WCFM Marketplace – Multivendor Marketplace for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.7.2.
April 26, 2026
CVE-2026-40784: FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration <= 1.91.2 Authenticated (Board Member+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-40784 in Fluent Boards (CVSS 4.3): FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team.... Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.91.3.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.