AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 23, 2026
CVE-2025-62091: Serial Codes Generator and Validator with WooCommerce Support <= 2.8.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-62091 in Serial Codes Generator And Validator (CVSS 4.3): Serial Codes Generator and Validator with WooCommerce Support. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to...
March 23, 2026
CVE-2025-63004: All in One Accessibility <= 1.15 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-63004 in All In One Accessibility (CVSS 4.3): All in One Accessibility. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.16.
March 23, 2026
CVE-2025-62084: iNext Woo Pincode Checker <= 2.3.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-62084 in Inext Woo Pincode Checker (CVSS 4.3): iNext Woo Pincode Checker. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-66157: Sliper for Elementor <= 1.0.10 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-66157 in Sliper Elementor (CVSS 4.3): Sliper for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-66146: Logger for Elementor <= 1.0.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-66146 in Logger Elementor (CVSS 4.3): Logger for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-63020: Postie <= 1.9.73 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-63020 in Postie (CVSS 6.4): Postie. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.9.74.
March 23, 2026
CVE-2025-62144: Core Web Vitals & PageSpeed Booster <= 1.0.27 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-62144 in Core Web Vitals Pagespeed Booster (CVSS 4.3): Core Web Vitals & PageSpeed Booster. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.28.
March 23, 2026
CVE-2025-59136: Gerencianet Oficial <= 3.1.3 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-59136 in Woo Gerencianet Official (CVSS 5.3): Gerencianet Oficial. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-66154: Couponer for Elementor <= 1.1.7 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-66154 in Couponer Elementor (CVSS 4.3): Couponer for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-68885: Custom Post Status <= 1.1.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2025-68885 in Custom Post Status (CVSS 4.3): Custom Post Status. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-66144: Worker for Elementor <= 1.0.10 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-66144 in Worker Elementor (CVSS 4.3): Worker for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 23, 2026
CVE-2025-49339: Direct Payments WP <= 1.3.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-49339 in Direct Payments Wp (CVSS 4.3): Direct Payments WP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.1.
March 23, 2026
CVE-2025-49340: Direct Payments WP <= 1.3.0 Authenticated (Subscriber+) Sensitive Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-49340 in Direct Payments Wp (CVSS 4.3): Direct Payments WP. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.3.1.
March 23, 2026
CVE-2025-10734: ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 Unauthenticated Sensitive Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-10734 in Reviewx (CVSS 5.3): ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
March 23, 2026
CVE-2025-10736: ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation PoC, Patch Analysis & Rule
Medium CVE-2025-10736 in Reviewx (CVSS 6.5): ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
March 23, 2026
CVE-2026-4373: JetFormBuilder <= 3.5.6.2 Unauthenticated Arbitrary File Read via Media Field PoC, Patch Analysis & Rule
High CVE-2026-4373 in Jetformbuilder (CVSS 7.5): JetFormBuilder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.6.3.
March 23, 2026
CVE-2025-6229: Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget` PoC, Patch Analysis & Rule
Medium CVE-2025-6229 in Sina Extension For Elementor (CVSS 6.4): Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor.... Atomic Edge summarizes impact, exploitability, and patch details...
March 23, 2026
CVE-2025-10731: ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 Unauthenticated Sensitive Information Exposure to Data Export PoC, Patch Analysis & Rule
Medium CVE-2025-10731 in Reviewx (CVSS 5.3): ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
March 23, 2026
CVE-2026-3427: Yoast SEO <= 27.1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute PoC, Patch Analysis & Rule
Medium CVE-2026-3427 in Wordpress Seo (CVSS 6.4): Yoast SEO. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 27.2.
March 23, 2026
CVE-2025-10679: ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 Unauthenticated Limited Remote Code Execution PoC, Patch Analysis & Rule
High CVE-2025-10679 in Reviewx (CVSS 7.3): ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema.... Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule...
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.