AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
July 5, 2026
CVE-2026-57634: PPWP – Password Protect Pages <= 1.9.19 Authenticated (Contributor+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-57634 in Password Protect Page (CVSS 4.3): PPWP – Password Protect Pages. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.9.20.
July 5, 2026
CVE-2026-57664: Bopo – WooCommerce Product Bundle Builder <= 1.1.6 Unauthenticated Sensitive Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-57664 in Bopo Woo Product Bundle Builder (CVSS 5.3): Bopo – WooCommerce Product Bundle Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 4, 2026
CVE-2026-12904: Kadence Blocks <= 3.7.7 Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Optimizer Data Deletion/Read/Modification via 'post_path' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-12904 in Kadence Blocks (CVSS 4.3): Kadence Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 4, 2026
CVE-2026-10513: Webmention <= 5.8.0 Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author Properties PoC, Patch Analysis & Rule
High CVE-2026-10513 in Webmention (CVSS 7.2): Webmention. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.8.1.
July 4, 2026
CVE-2026-12133: JoomSport <= 5.7.8 Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action PoC, Patch Analysis & Rule
Medium CVE-2026-12133 in Joomsport Sports League Results Management (CVSS 4.3): JoomSport. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.7.9.
July 4, 2026
CVE-2026-13246: GiveWP <= 4.16.0 Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-13246 in Give (CVSS 6.4): GiveWP. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.16.1.
July 4, 2026
CVE-2026-12902: Kadence Blocks <= 3.7.7 Missing Authorization to Authenticated (Contributor+) Arbitrary Media Attachment Creation via kadence_import_process_pattern/kadence_import_process_data AJAX Actions PoC, Patch Analysis & Rule
Medium CVE-2026-12902 in Kadence Blocks (CVSS 4.3): Kadence Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 4, 2026
CVE-2026-57346: Embed Privacy <= 1.12.3 Authenticated (Contributor+) Arbitrary File Deletion PoC, Patch Analysis & Rule
High CVE-2026-57346 in Embed Privacy (CVSS 8.1): Embed Privacy. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.12.4.
July 4, 2026
CVE-2026-57318: Site Reviews <= 8.0.11 Authenticated (Subscriber+) Sensitive Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-57318 in Site Reviews (CVSS 4.3): Site Reviews. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.0.12.
July 4, 2026
CVE-2025-64637: Auros Core <= 5.3.1 Unauthenticated Arbitrary Shortcode Execution PoC, Patch Analysis & Rule
Medium CVE-2025-64637 in Auros Core (CVSS 6.5): Auros Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
July 4, 2026
CVE-2026-57323: HTML5 Video Player – Embed and Play Videos in Custom Player <= 2.11.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-57323 in Html5 Video Player (CVSS 5.3): HTML5 Video Player – Embed and Play Videos in Custom Player. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.11.1.
July 4, 2026
CVE-2025-63078: Restaurant Menu and Food Ordering <= 2.4.11 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-63078 in Mp Restaurant Menu (CVSS 4.3): Restaurant Menu and Food Ordering. Atomic Edge summarizes impact, exploitability, and patch details.
July 4, 2026
CVE-2026-57317: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-57317 in Simply Schedule Appointments (CVSS 7.2): Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage...
July 4, 2026
CVE-2026-57676: Simple User Avatar <= 4.9 Authenticated (Subscriber+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-57676 in Simple User Avatar (CVSS 4.3): Simple User Avatar. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.0.
July 4, 2026
CVE-2026-57653: WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.2 Authenticated (Contributor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-57653 in Wp Job Portal (CVSS 6.5): WP Job Portal – AI-Powered Recruitment System for Company or Job Board website. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.5.3.
July 4, 2026
CVE-2026-57316: GetGenie – AI Content Writer with Keyword Research & SEO Tracking <= 4.4.2 Authenticated (Subscriber+) Sensitive Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-57316 in Getgenie (CVSS 4.3): GetGenie – AI Content Writer with Keyword Research & SEO Tracking. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.4.3.
July 4, 2026
CVE-2026-57322: weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce <= 2.1.2 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-57322 in Wemail (CVSS 6.1): weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.1.3.
July 4, 2026
CVE-2026-57646: Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.1.7 Authenticated (Subscriber+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-57646 in Majestic Support (CVSS 4.3): Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.1.8.
July 4, 2026
CVE-2026-57644: Restaurant Menu and Food Ordering <= 2.4.10 Authenticated (Contributor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-57644 in Mp Restaurant Menu (CVSS 6.5): Restaurant Menu and Food Ordering. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.4.11.
July 4, 2026
CVE-2026-57628: WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets <= 4.0.1 Authenticated (Administrator+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-57628 in Wp All Import (CVSS 4.9): WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.1.0.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.