AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 23, 2026
CVE-2026-0833: Team Section Block <= 2.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network Link PoC, Patch Analysis & Rule
Medium CVE-2026-0833 in Team Section (CVSS 6.4): Team Section Block. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.1.
March 23, 2026
CVE-2025-8615: CubeWP <= 1.1.26 Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode PoC, Patch Analysis & Rule
Medium CVE-2025-8615 in Cubewp Framework (CVSS 6.4): CubeWP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.27.
March 23, 2026
CVE-2025-13725: Gutenberg Thim Blocks <= 1.0.1 Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-13725 in Thim Blocks (CVSS 6.5): Gutenberg Thim Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.2.
March 23, 2026
CVE-2025-14463: Payment Button for PayPal <= 1.2.3.41 Missing Authorization to Unauthenticated Arbitrary Order Creation PoC, Patch Analysis & Rule
Medium CVE-2025-14463 in Wp Paypal (CVSS 5.3): Payment Button for PayPal. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.3.42.
March 23, 2026
CVE-2026-0820: RepairBuddy <= 4.1116 Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders PoC, Patch Analysis & Rule
Medium CVE-2026-0820 in Computer Repair Shop (CVSS 5.3): RepairBuddy. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.1125.
March 23, 2026
CVE-2025-12002: Feeds for YouTube Pro <= 2.6.0 Unauthenticated Arbitrary File Read via Path Traversal PoC, Patch Analysis & Rule
Medium CVE-2025-12002 in Youtube Feed Pro (CVSS 5.9): Feeds for YouTube Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-12718: Quick Contact Form <= 8.2.6 Unauthenticated Open Mail Relay PoC, Patch Analysis & Rule
Medium CVE-2025-12718 in Quick Contact Form (CVSS 5.8): Quick Contact Form. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.2.7.
March 23, 2026
CVE-2025-14075: WP Hotel Booking <= 2.2.7 Unauthenticated Sensitive Information Exposure via 'email' Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-14075 in Wp Hotel Booking (CVSS 5.3): WP Hotel Booking. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.2.8.
March 23, 2026
CVE-2025-14632: Filr – Secure document library <= 1.2.11 Authenticated (Administrator+) Stored Cross-Site Scripting via HTML Upload PoC, Patch Analysis & Rule
Medium CVE-2025-14632 in Filr Protection (CVSS 4.4): Filr – Secure document library. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.2.12.
March 23, 2026
CVE-2026-0682: Church Admin <= 5.0.28 Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter PoC, Patch Analysis & Rule
Low CVE-2026-0682 in Church Admin (CVSS 2.2): Church Admin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 5.0.29.
March 23, 2026
CVE-2025-67939: Tickera <= 3.5.6.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67939 in Tickera Event Ticketing System (CVSS 4.3): Tickera. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.5.6.3.
March 23, 2026
CVE-2025-68008: Mail <= 1.3 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68008 in Wp Mail (CVSS 6.1): Mail. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-15403: RegistrationMagic <= 6.0.7.1 Privilege Escalation via admin_order PoC, Patch Analysis & Rule
Critical CVE-2025-15403 in Custom Registration Form Builder With Submission Manager (CVSS 9.8): RegistrationMagic. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.0.7.2.
March 23, 2026
CVE-2025-14450: Wallet System for WooCommerce <= 2.7.2 Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation PoC, Patch Analysis & Rule
Medium CVE-2025-14450 in Wallet System For Woocommerce (CVSS 6.5): Wallet System for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.7.3.
March 23, 2026
CVE-2025-31413: Element Pack Elementor Addons <= 8.3.13 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-31413 in Bdthemes Element Pack Lite (CVSS 4.3): Element Pack Elementor Addons. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.3.14.
March 23, 2026
CVE-2026-24593: AWP Classifieds <= 4.4.3 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-24593 in Another Wordpress Classifieds Plugin (CVSS 5.3): AWP Classifieds. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.4.4.
March 23, 2026
CVE-2025-12825: User Registration Using Contact Form 7 <= 2.5 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-12825 in User Registration Using Contact Form 7 (CVSS 5.3): User Registration Using Contact Form 7. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.6.
March 23, 2026
CVE-2025-67942: Peach Payments Gateway <= 3.3.6 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67942 in Wc Peach Payments Gateway (CVSS 5.3): Peach Payments Gateway. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.3.7.
March 23, 2026
CVE-2025-12984: Advanced Ads – Ad Manager & AdSense <= 2.0.15 Authenticated (Admin+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2025-12984 in Advanced Ads (CVSS 4.9): Advanced Ads – Ad Manager & AdSense. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.16.
March 23, 2026
CVE-2026-25004: CM Business Directory – Optimise and showcase local business <= 1.5.3 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25004 in Cm Business Directory (CVSS 6.4): CM Business Directory – Optimise and showcase local business. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.