AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 23, 2026
CVE-2026-3550: RockPress <= 1.0.17 Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via AJAX Actions PoC, Patch Analysis & Rule
Medium CVE-2026-3550 in Ft Rockpress (CVSS 5.3): RockPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-25455: Product Slider, Product Grid, Product Masonry <= 1.13.60 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25455 in Woocommerce Products Slider (CVSS 4.3): Product Slider, Product Grid, Product Masonry. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-25465: CP Multi View Events Calendar <= 1.4.34 Authenticated (Subscriber+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25465 in Cp Multi View Calendar (CVSS 6.4): CP Multi View Events Calendar. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-25452: Remoji – Post/Comment Reaction and Enhancement <= 2.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-25452 in Remoji (CVSS 7.2): Remoji – Post/Comment Reaction and Enhancement. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-4006: Draft List <= 2.6.2 Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-4006 in Simple Draft List (CVSS 6.4): Draft List. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-4120: Info Cards <= 2.0.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes PoC, Patch Analysis & Rule
Medium CVE-2026-4120 in Info Cards (CVSS 6.4): Info Cards. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-25461: Listeo-Core Directory Plugin by Purethemes <= 2.0.21 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25461 in Listeo Core (CVSS 6.1): Listeo-Core - Directory Plugin by Purethemes. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-4068: Add Custom Fields to Media <= 2.0.3 Cross-Site Request Forgery to Custom Field Deletion via 'delete' Parameter PoC, Patch Analysis & Rule
Medium CVE-2026-4068 in Add Custom Fields To Media (CVSS 4.3): Add Custom Fields to Media. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-32583: Modern Events Calendar <= 7.29.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32583 in Modern Events Calendar (CVSS 5.3): Modern Events Calendar. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-25456: Automated FedEx live/manual rates with shipping labels – HPOS supported <= 5.1.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-25456 in A2z Fedex Shipping (CVSS 5.3): Automated FedEx live/manual rates with shipping labels – HPOS supported. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-1238: SlimStat Analytics <= 5.3.5 Unauthenticated Stored Cross-Site Scripting via 'fh' PoC, Patch Analysis & Rule
High CVE-2026-1238 in Wp Slimstat (CVSS 7.2): SlimStat Analytics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-32462: Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-32462 in Master Addons (CVSS 6.4): Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-32461: Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) <= 9.5.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32461 in Really Simple Ssl (CVSS 4.3): Really Simple Security – Simple and Performant Security (formerly Really Simple SSL). Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-4038: Aimogen Pro <= 2.7.5 Unauthenticated Privilege Escalation via Arbitrary Function Call PoC, Patch Analysis & Rule
Critical CVE-2026-4038 in Aimogen Pro (CVSS 9.8): Aimogen Pro. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-15520: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-15520 in Custom Registration Form Builder With Submission Manager (CVSS 5.3): RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login. Atomic Edge summarizes impact, exploitability...
March 23, 2026
CVE-2026-27070: Everest Forms Pro <= 1.9.10 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2026-27070 in Everest Forms Pro (CVSS 7.2): Everest Forms Pro. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-1867: Guest posting / Frontend Posting / Front Editor – WP Front User Submit < 5.0.6 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2026-1867 in Front Editor (CVSS 5.3): Guest posting / Frontend Posting / Front Editor – WP Front User Submit < 5.0.6 - Unauthenticated.... Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-2687: Reading progressbar < 1.3.1 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-2687 in Reading Progress Bar (CVSS 4.4): Reading progressbar < 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-25369: Flexmls® IDX Plugin <= 3.15.9 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-25369 in Flexmls Idx (CVSS 6.1): Flexmls® IDX Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-24968: Xagio SEO – AI Powered SEO <= 7.1.0.30 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Medium CVE-2026-24968 in Xagio Seo (CVSS 5.3): Xagio SEO – AI Powered SEO. Atomic Edge summarizes impact, exploitability, and patch details.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.