AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-24627: Trusona for WordPress <= 2.0.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24627 in Trusona (CVSS 4.3): Trusona for WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24374: RegistrationMagic <= 6.0.6.9 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-24374 in Custom Registration Form Builder With Submission Manager (CVSS 4.3): RegistrationMagic. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.0.7.0.
March 18, 2026
CVE-2025-69359: Creator LMS <= 1.1.12 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69359 in Creatorlms (CVSS 5.3): Creator LMS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.1.13.
March 18, 2026
CVE-2026-24966: Copyscape Premium <= 1.4.1 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-24966 in Copyscape Premium (CVSS 4.3): Copyscape Premium. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.4.2.
March 18, 2026
CVE-2025-66143: Crumber <= 1.0.10 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-66143 in Crumber Elementor (CVSS 4.3): Crumber. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-66140: Uper for Elementor <= 1.0.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-66140 in Uper Elementor (CVSS 4.3): Uper for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69360: TheGem Theme Elements (for WPBakery) <= 5.11.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69360 in Thegem Elements (CVSS 6.4): TheGem Theme Elements (for WPBakery). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69356: TheGem Theme Elements (for Elementor) <= 5.11.0 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2025-69356 in Thegem Elements Elementor (CVSS 7.5): TheGem Theme Elements (for Elementor). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69357: TheGem Theme Elements (for Elementor) <= 5.11.0 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69357 in Thegem Elements Elementor (CVSS 6.4): TheGem Theme Elements (for Elementor). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24384: Merge + Minify + Refresh <= 2.14 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-24384 in Merge Minify Refresh (CVSS 4.3): Merge + Minify + Refresh. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.15.
March 18, 2026
CVE-2026-0831: Templately <= 3.4.8 Unauthenticated Limited Arbitrary JSON File Write PoC, Patch Analysis & Rule
Medium CVE-2026-0831 in Templately (CVSS 5.3): Templately. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.4.9.
March 18, 2026
CVE-2025-14976: User Registration & Membership <= 4.4.8 Cross-Site Request Forgery to Arbitrary Post Deletion PoC, Patch Analysis & Rule
Medium CVE-2025-14976 in User Registration (CVSS 5.4): User Registration & Membership. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.4.9.
March 18, 2026
CVE-2026-24633: Add Expires Headers & Optimized Minify <= 3.1.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24633 in Add Expires Headers (CVSS 5.3): Add Expires Headers & Optimized Minify. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24629: Web Accessibility with Max Access <= 2.1.0 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24629 in Accessibility Toolbar (CVSS 4.4): Web Accessibility with Max Access. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24630: Stylish Cost Calculator <= 8.1.9 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24630 in Stylish Cost Calculator (CVSS 6.4): Stylish Cost Calculator. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.2.1.
March 18, 2026
CVE-2025-14943: Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-14943 in Blog2social (CVSS 4.3): Blog2Social: Social Media Auto Post & Scheduler. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 8.7.3.
March 18, 2026
CVE-2026-24632: Delay Redirects <= 1.0.0 Authenticated (Editor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-24632 in Delay Redirects (CVSS 4.4): Delay Redirects. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-27074: Shortcoder — Create Shortcodes for Anything <= 6.5.1 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-27074 in Shortcoder (CVSS 6.4): Shortcoder — Create Shortcodes for Anything. Atomic Edge summarizes impact, exploitability, and patch details. Update to 6.5.2.
March 18, 2026
CVE-2025-69353: Proxy & VPN Blocker <= 3.5.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69353 in Proxy Vpn Blocker (CVSS 4.3): Proxy & VPN Blocker. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.4.
March 18, 2026
CVE-2025-12379: Shortcodes and extra features for Phlox theme <= 2.17.13 Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget PoC, Patch Analysis & Rule
Medium CVE-2025-12379 in Auxin Elements (CVSS 6.4): Shortcodes and extra features for Phlox theme. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.17.14.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.