AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 23, 2026
CVE-2026-32460: Ultra Addons for Contact Form 7 <= 3.5.36 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-32460 in Ultimate Addons For Contact Form 7 (CVSS 6.4): Ultra Addons for Contact Form 7. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-32458: WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.7 Authenticated (Editor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-32458 in Bulk Editor (CVSS 4.9): WOLF – WordPress Posts Bulk Editor and Manager Professional. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-24373: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 Authentication Bypass PoC, Patch Analysis & Rule
Critical CVE-2026-24373 in Custom Registration Form Builder With Submission Manager (CVSS 9.8): RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login. Atomic Edge summarizes impact, exploitability...
March 23, 2026
CVE-2026-32459: UpsellWP – WooCommerce Upsell and Related Products Offers <= 2.2.4 Authenticated (Shop manager+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-32459 in Checkout Upsell And Order Bumps (CVSS 4.9): UpsellWP – WooCommerce Upsell and Related Products Offers. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-24611: MetForm Pro <= 3.9.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24611 in Metform Pro (CVSS 5.3): MetForm Pro. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-24372: Subscriptions for WooCommerce <= 1.8.10 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24372 in Subscriptions For Woocommerce (CVSS 5.3): Subscriptions for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-2631: Datalogics Ecommerce Delivery – Datalogics < 2.6.60 Unauthenticated Privilege Escalation PoC, Patch Analysis & Rule
Critical CVE-2026-2631 in Datalogics (CVSS 9.8): Datalogics Ecommerce Delivery – Datalogics < 2.6.60 - Unauthenticated Privilege Escalation. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-27046: StoreCustomizer – A plugin to Customize all WooCommerce Pages <= 2.6.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-27046 in Woocustomizer (CVSS 4.3): StoreCustomizer – A plugin to Customize all WooCommerce Pages. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-27067: Mobile App Editor – WordPress to Android App Builder <= 1.3.1 Authenticated (Editor+) Arbitrary File Upload PoC, Patch Analysis & Rule
High CVE-2026-27067 in Mobile App Editor (CVSS 7.2): Mobile App Editor – WordPress to Android App Builder. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-1753: Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder < 1.6.1 Missing Authorization to Authenticated (Contributor+) Settings Update PoC, Patch Analysis & Rule
Medium CVE-2026-1753 in Gutena Forms (CVSS 4.3): Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <.... Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-2626: Divi Booster < 5.0.2 Unauthenticated PHP Object Injection PoC, Patch Analysis & Rule
High CVE-2026-2626 in Divi Booster (CVSS 8.1): Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2025-69358: EventPrime – Events Calendar, Bookings and Tickets <= 4.2.6.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69358 in Eventprime Event Calendar Management (CVSS 5.3): EventPrime – Events Calendar, Bookings and Tickets. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2025-15473: Timetics – Appointment Booking Calendar & Scheduling System < 1.0.52 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-15473 in Timetics (CVSS 5.3): Timetics – Appointment Booking Calendar & Scheduling System < 1.0.52 - Missing Authorization. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-27071: WPCafe – Restaurant Menu, Online Food Ordering and Reservation Booking Solution <= 3.0.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-27071 in Wp Cafe (CVSS 5.3): WPCafe – Restaurant Menu, Online Food Ordering and Reservation Booking Solution. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-27065: BuilderPress <= 2.0.1 Unauthenticated Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-27065 in Builderpress (CVSS 8.1): BuilderPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-27054: Penci Soledad Data Migrator <= 1.3.1 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-27054 in Penci Data Migrator (CVSS 6.1): Penci Soledad Data Migrator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-32543: Responsive Blocks – Page Builder for Blocks & Patterns <= 2.2.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32543 in Responsive Block Editor Addons (CVSS 5.3): Responsive Blocks – Page Builder for Blocks & Patterns. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-27068: Website LLMs.txt <= 8.2.6 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-27068 in Website Llms Txt (CVSS 6.1): Website LLMs.txt. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2026-32452: Avada (Fusion) Builder < 3.15.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32452 in Fusion Builder (CVSS 5.3): Avada (Fusion) Builder < 3.15.0 - Missing Authorization. Atomic Edge summarizes impact, exploitability, and patch details.
March 23, 2026
CVE-2026-32451: Avada (Fusion) Builder < 3.15.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-32451 in Fusion Builder (CVSS 4.3): Avada (Fusion) Builder < 3.15.0 - Missing Authorization. Atomic Edge summarizes impact, exploitability, and patch details.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.