AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-49046: xPromoter <= 1.3.4 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-49046 in Top_bar_promoter (CVSS 6.1): xPromoter. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68904: JNews Frontend Submit <= 11.0.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-68904 in Jnews Frontend Submit (CVSS 6.1): JNews - Frontend Submit. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24616: WP Popups <= 2.2.0.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24616 in Wp Popups Lite (CVSS 4.3): WP Popups. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.2.0.6.
March 18, 2026
CVE-2026-24619: PopCash.Net Code Integration Tool <= 1.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24619 in Popcashnet Code Integration Tool (CVSS 5.3): PopCash.Net Code Integration Tool. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.
March 18, 2026
CVE-2026-24617: Easy Modal <= 2.1.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24617 in Easy Modal (CVSS 6.4): Easy Modal. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-27066: Live sales notification for WooCommerce <= 2.3.46 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-27066 in Live Sales Notifications For Woocommerce (CVSS 5.3): Live sales notification for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.47.
March 18, 2026
CVE-2026-27057: Penci Filter Everything <= 1.7 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-27057 in Penci Filter Everything (CVSS 6.4): Penci Filter Everything. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-27058: Penci Podcast <= 1.7 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-27058 in Penci Podcast (CVSS 6.4): Penci Podcast. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69361: Post Expirator <= 4.9.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69361 in Post Expirator (CVSS 4.3): Post Expirator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.9.4.
March 18, 2026
CVE-2026-27059: Penci Recipe <= 4.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-27059 in Penci Recipe (CVSS 6.4): Penci Recipe. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24392: HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.14.2 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24392 in Hurrytimer (CVSS 6.4): HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.14.3.
March 18, 2026
CVE-2026-24354: Penci Shortcodes & Performance <= 6.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24354 in Penci Shortcodes (CVSS 6.4): Penci Shortcodes & Performance. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24967: Amelia <= 1.2.38 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24967 in Ameliabooking (CVSS 5.3): Amelia. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.0.
March 18, 2026
CVE-2026-24622: Suggestion Toolkit <= 5.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24622 in Suggestion Toolkit (CVSS 4.3): Suggestion Toolkit. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24621: Terms descriptions <= 3.4.9 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24621 in Terms Descriptions (CVSS 4.4): Terms descriptions. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.4.10.
March 18, 2026
CVE-2026-24625: File Uploads Addon for WooCommerce <= 1.7.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24625 in Woo Addon Uploads (CVSS 5.3): File Uploads Addon for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24623: Neoforum <= 1.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24623 in Neoforum (CVSS 6.1): Neoforum. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24624: Neoforum <= 1.0 Authenticated (Administrator+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-24624 in Neoforum (CVSS 4.9): Neoforum. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24620: Landing Page Builder <= 1.5.3.4 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24620 in Page Builder Add (CVSS 6.4): Landing Page Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24626: Logo Slider <= 4.9.0 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24626 in Logo Slider Wp (CVSS 6.4): Logo Slider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.