AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
April 23, 2026
CVE-2026-4118: Call To Action Plugin <= 3.1.3 Cross-Site Request Forgery via Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-4118 in Call To Action Plugin (CVSS 4.3): Call To Action Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-4353: CI HUB Connector <= 1.2.106 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-4353 in Ci Hub Connector (CVSS 6.4): CI HUB Connector. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-4076: Slider Bootstrap Carousel <= 1.0.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4076 in Slider Bootstrap Carousel (CVSS 6.4): Slider Bootstrap Carousel. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-4085: Easy Social Photos Gallery <= 3.1.2 Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper_class' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-4085 in My Instagram Feed (CVSS 6.4): Easy Social Photos Gallery. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-4088: Switch CTA Box <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
Medium CVE-2026-4088 in Switch Cta Box (CVSS 6.4): Switch CTA Box. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-1913: Gallagher Website Design <= 2.6.4 Authenticated (Contributor+) Stored Cross-Site Scripting via 'prefix' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1913 in Gallagher Website Design (CVSS 6.4): Gallagher Website Design. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.6.5.
April 23, 2026
CVE-2026-3361: WP Store Locator <= 2.2.261 Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Meta PoC, Patch Analysis & Rule
Medium CVE-2026-3361 in Wp Store Locator (CVSS 6.4): WP Store Locator. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.3.0.
April 23, 2026
CVE-2026-3844: Breeze Cache <= 2.4.4 Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote PoC, Patch Analysis & Rule
Critical CVE-2026-3844 in Breeze (CVSS 9.8): Breeze Cache. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.5.
April 23, 2026
CVE-2026-1923: Social Rocket – Social Sharing Plugin <= 1.3.4.2 Authenticated (Subscriber+) Stored Cross-Site Scripting via id PoC, Patch Analysis & Rule
Medium CVE-2026-1923 in Social Rocket (CVSS 6.4): Social Rocket – Social Sharing Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.5.
April 23, 2026
CVE-2026-1930: Emailchef <= 3.5.1 Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-1930 in Emailchef (CVSS 4.3): Emailchef. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.5.2.
April 23, 2026
CVE-2026-1845: Real Estate Pro <= 1.0.9 Authenticated (Admin+) Stored Cross-Site Scripting via Settings PoC, Patch Analysis & Rule
Medium CVE-2026-1845 in Re Pro (CVSS 5.5): Real Estate Pro. Atomic Edge summarizes impact, exploitability, and patch details.
April 23, 2026
CVE-2026-5464: ExactMetrics <= 9.1.2 Authenticated (Editor+) Arbitrary Plugin Installation/Activation via exactmetrics_connect_process PoC, Patch Analysis & Rule
High CVE-2026-5464 in Google Analytics Dashboard For Wp (CVSS 7.2): ExactMetrics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 9.1.3.
April 23, 2026
CVE-2026-1395: Gutentools <= 1.1.3 Authenticated (Contributor+) Stored Cross-Site Scripting via Post Slider Block Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-1395 in Gutentools (CVSS 6.4): Gutentools. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.1.4.
April 23, 2026
CVE-2026-3362: Short Comment Filter <= 2.2 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Minimum Count' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-3362 in Short Comment Filter (CVSS 4.4): Short Comment Filter. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-2719: Private WP suite <= 0.4.1 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Exceptions' Setting PoC, Patch Analysis & Rule
Medium CVE-2026-2719 in Private Wp Suite (CVSS 4.4): Private WP suite. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-2951: Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML PoC, Patch Analysis & Rule
Medium CVE-2026-2951 in Gutentor (CVSS 5.4): Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.6.
April 23, 2026
CVE-2026-1379: HTTP Headers <= 1.19.2 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Headers' Plugin Setting PoC, Patch Analysis & Rule
Medium CVE-2026-1379 in Http Headers (CVSS 4.4): HTTP Headers. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-4132: HTTP Headers <= 1.19.2 Authenticated (Administrator+) External Control of File Name or Path to RCE via 'hh_htpasswd_path' and 'hh_www_authenticate_user' Parameters PoC, Patch Analysis & Rule
High CVE-2026-4132 in Http Headers (CVSS 7.2): HTTP Headers. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-2717: HTTP Headers <= 1.19.2 Authenticated (Administrator+) CRLF Injection via Custom Header Values PoC, Patch Analysis & Rule
Medium CVE-2026-2717 in Http Headers (CVSS 5.5): HTTP Headers. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
April 23, 2026
CVE-2026-4119: Create DB Tables <= 1.2.1 Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Table Creation/Deletion via admin-post.php PoC, Patch Analysis & Rule
Critical CVE-2026-4119 in Create Db Tables (CVSS 9.1): Create DB Tables. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.