AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 28, 2026
CVE-2026-3335: Canto <= 3.1.1 Missing Authorization to Unauthenticated File Upload PoC, Patch Analysis & Rule
Medium CVE-2026-3335 in Canto (CVSS 5.3): Canto. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 26, 2026
CVE-2026-3333: MinhNhut Link Gateway <= 3.6.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-3333 in Minhnhut Link Gateway (CVSS 6.4): MinhNhut Link Gateway. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-1800: Fonts Manager | Custom Fonts <= 1.2 Unauthenticated SQL Injection via fmcfIdSelectedFnt parameter PoC, Patch Analysis & Rule
High CVE-2026-1800 in Fonts Manager Custom Fonts (CVSS 7.5): Fonts Manager | Custom Fonts. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-3334: CMS Commander <= 2.288 Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter PoC, Patch Analysis & Rule
High CVE-2026-3334 in Cms Commander Client (CVSS 8.8): CMS Commander. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2837: Ricerca – advanced search <= 1.1.12 Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Settings PoC, Patch Analysis & Rule
Medium CVE-2026-2837 in Ricerca Smart Search (CVSS 4.4): Ricerca – advanced search. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-1935: Company Posts for LinkedIn <= 1.0.0 Missing Authorization to Authenticated (Subscriber+) Arbitrary LinkedIn Post Data Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-1935 in Company Posts For Linkedin (CVSS 4.3): Company Posts for LinkedIn. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-1253: Group Chat & Video Chat by AtomChat <= 1.1.7 Missing Authorization to Authenticated (Subscriber+) Plugin Options Update PoC, Patch Analysis & Rule
Medium CVE-2026-1253 in Atomchat (CVSS 5.3): Group Chat & Video Chat by AtomChat. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.8.
March 25, 2026
CVE-2026-2121: Weaver Show Posts <= 1.8.1 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting PoC, Patch Analysis & Rule
Medium CVE-2026-2121 in Show Posts (CVSS 4.4): Weaver Show Posts. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-4766: Easy Image Gallery <= 1.5.3 Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Shortcode Post Meta PoC, Patch Analysis & Rule
Medium CVE-2026-4766 in Easy Image Gallery (CVSS 6.4): Easy Image Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-1806: Tour & Activity Operator Plugin for TourCMS <= 1.7.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1806 in Tour Operator Plugin (CVSS 6.4): Tour & Activity Operator Plugin for TourCMS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2277: rexCrawler <= 1.0.15 Reflected Cross-Site Scripting via 'url' and 'regex' Parameters PoC, Patch Analysis & Rule
Medium CVE-2026-2277 in Rexcrawler (CVSS 6.1): rexCrawler. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-1822: WP NG Weather <= 1.0.9 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1822 in Wp Ng Weather (CVSS 6.4): WP NG Weather. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2440: SurveyJS: Drag & Drop Form Builder <= 2.5.3 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-2440 in Surveyjs (CVSS 7.2): SurveyJS: Drag & Drop Form Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-1313: MimeTypes Link Icons <= 3.2.20 Authenticated (Contributor+) Server-Side Request Forgery via Crafted Links in Post Content PoC, Patch Analysis & Rule
High CVE-2026-1313 in Mimetypes Link Icons (CVSS 8.3): MimeTypes Link Icons. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2279: myLinksDump <= 1.6 Authenticated (Administrator+) SQL Injection via 'sort_by' and 'sort_order' Parameters PoC, Patch Analysis & Rule
High CVE-2026-2279 in Mylinksdump (CVSS 7.2): myLinksDump. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-1503: login_register <= 1.2.0 Cross-Site Request Forgery to Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-1503 in Login Register (CVSS 4.3): login_register. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2427: itsukaita <= 0.1.2 Reflected Cross-Site Scripting via 'day_from' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-2427 in Itsukaita (CVSS 6.1): itsukaita. Atomic Edge summarizes impact, exploitability, and patch details.
March 25, 2026
CVE-2026-2720: Hr Press Lite <= 1.0.2 Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-2720 in Hr Press Lite (CVSS 6.5): Hr Press Lite. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2723: Post Snippits <= 1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-2723 in Post Snippits (CVSS 6.1): Post Snippits. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2496: Ed’s Font Awesome <= 2.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-2496 in Eds Font Awesome (CVSS 6.4): Ed's Font Awesome. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.