AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 25, 2026
CVE-2026-2424: Reward Video Ad for WordPress <= 1.6 Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings PoC, Patch Analysis & Rule
Medium CVE-2026-2424 in Applixir (CVSS 4.4): Reward Video Ad for WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2503: ElementCamp <= 2.3.6 Authenticated (Author+) SQL Injection via 'meta_query[compare]' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-2503 in Element Camp (CVSS 6.5): ElementCamp. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-2501: Ed’s Social Share <= 2.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-2501 in Eds Social Share (CVSS 6.4): Ed's Social Share. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-4161: Review Map by RevuKangaroo <= 1.7 Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings PoC, Patch Analysis & Rule
Medium CVE-2026-4161 in Review Map By Revukangaroo (CVSS 4.4): Review Map by RevuKangaroo. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 25, 2026
CVE-2026-1851: iVysilani Shortcode <= 3.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-1851 in Ivysilani Shortcode (CVSS 6.4): iVysilani Shortcode. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 24, 2026
CVE-2026-32352: elementor PoC, Patch Analysis & Rule
CVE-2026-32352 in Elementor: Atomic Edge analysis of CVE-2026-32352 (metadata-based): This vulnerability affects the Elementor.... Atomic Edge summarizes impact, exploitability, and patch details.
March 24, 2026
CVE-2026-4283: WP DSGVO Tools (GDPR) <= 3.1.38 Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users PoC, Patch Analysis & Rule
Critical CVE-2026-4283 in Shapepress Dsgvo (CVSS 9.1): WP DSGVO Tools (GDPR). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.1.39.
March 24, 2026
CVE-2026-3079: LearnDash LMS <= 5.0.3 Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-3079 in Sfwd Lms (CVSS 6.5): LearnDash LMS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 24, 2026
CVE-2026-4001: Woocommerce Custom Product Addons Pro <= 5.4.1 Unauthenticated Remote Code Execution via Custom Pricing Formula PoC, Patch Analysis & Rule
Critical CVE-2026-4001 in Woo Custom Product Addons Pro (CVSS 9.8): Woocommerce Custom Product Addons Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 24, 2026
CVE-2026-4662: JetEngine <= 3.8.6.1 Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter PoC, Patch Analysis & Rule
High CVE-2026-4662 in Jet Engine (CVSS 7.5): JetEngine. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 24, 2026
CVE-2026-3138: Product Filter for WooCommerce by WBW <= 3.1.2 Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE PoC, Patch Analysis & Rule
Medium CVE-2026-3138 in Woo Product Filter (CVSS 6.5): Product Filter for WooCommerce by WBW. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.1.3.
March 24, 2026
CVE-2026-4021: Contest Gallery <= 28.1.5 Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion PoC, Patch Analysis & Rule
High CVE-2026-4021 in Contest Gallery (CVSS 8.1): Contest Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 28.1.6.
March 24, 2026
CVE-2026-3533: JupiterX Core <= 4.14.1 Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import PoC, Patch Analysis & Rule
High CVE-2026-3533 in Jupiterx Core (CVSS 8.8): JupiterX Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 24, 2026
CVE-2026-4056: User Registration & Membership <= 5.1.4 Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation PoC, Patch Analysis & Rule
Medium CVE-2026-4056 in User Registration (CVSS 5.4): User Registration & Membership. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.1.5.
March 24, 2026
CVE-2026-4306: WP Job Portal <= 2.4.8 Unauthenticated SQL Injection via 'radius' Parameter PoC, Patch Analysis & Rule
High CVE-2026-4306 in Wp Job Portal (CVSS 7.5): WP Job Portal. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.9.
March 24, 2026
CVE-2026-3225: LearnPress <= 4.3.2.8 Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion PoC, Patch Analysis & Rule
Medium CVE-2026-3225 in Learnpress (CVSS 4.3): LearnPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.3.3.
March 24, 2026
CVE-2026-2412: Quiz and Survey Master (QSM) <= 10.3.5 Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-2412 in Quiz Master Next (CVSS 6.5): Quiz and Survey Master (QSM). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 11.0.0.
March 24, 2026
CVE-2026-4066: Smart Custom Fields <= 5.0.6 Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search PoC, Patch Analysis & Rule
Medium CVE-2026-4066 in Smart Custom Fields (CVSS 4.3): Smart Custom Fields. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.0.7.
March 24, 2026
CVE-2026-1390: Redirect countdown <= 1.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1390 in Redirect Countdown (CVSS 4.3): Redirect countdown. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 24, 2026
CVE-2026-1393: Add Google Social Profiles to Knowledge Graph Box <= 1.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1393 in Add Google Social Profiles To Knowledge Graph Box (CVSS 4.3): Add Google Social Profiles to Knowledge Graph Box. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.