AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-69351: Ninja Tables <= 5.2.4 Authenticated (Contributor+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2025-69351 in Ninja Tables (CVSS 6.5): Ninja Tables. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.2.5.
March 18, 2026
CVE-2025-47500: Stackable <= 3.19.5 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-47500 in Stackable Ultimate Gutenberg Blocks (CVSS 6.4): Stackable. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.19.6.
March 18, 2026
CVE-2025-14358: REHub Framework <= 19.9.5 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-14358 in Rehub Framework (CVSS 5.3): REHub Framework. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22517: GA4WP: Google Analytics for WordPress <= 2.10.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22517 in Ga For Wp (CVSS 4.3): GA4WP: Google Analytics for WordPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-27092: WPAdverts – Classifieds Plugin <= 2.2.11 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-27092 in Wpadverts (CVSS 4.3): WPAdverts – Classifieds Plugin. Atomic Edge summarizes impact, exploitability, and patch details. Update to 2.3.0.
March 18, 2026
CVE-2026-23805: Media Search Enhanced <= 0.9.1 Authenticated (Author+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-23805 in Media Search Enhanced (CVSS 6.5): Media Search Enhanced. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.9.2.
March 18, 2026
CVE-2026-22492: Docket Cache <= 24.07.04 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22492 in Docket Cache (CVSS 4.3): Docket Cache. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 24.07.05.
March 18, 2026
CVE-2026-22486: Re Gallery – Responsive Photo Gallery <= 1.17.19 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22486 in Regallery (CVSS 5.3): Re Gallery – Responsive Photo Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.17.20.
March 18, 2026
CVE-2025-69349: RSS Feed Widget <= 3.0.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69349 in Rss Feed Widget (CVSS 4.3): RSS Feed Widget. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.0.3.
March 18, 2026
CVE-2025-69093: ShopMagic <= 4.7.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69093 in Shopmagic For Woocommerce (CVSS 5.3): ShopMagic. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.7.3.
March 18, 2026
CVE-2026-22522: Block Slider <= 2.2.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22522 in Block Slider (CVSS 4.3): Block Slider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-12551: ListingHub 1.2.6 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-12551 in Listinghub (CVSS 7.2): ListingHub 1.2.6 - Unauthenticated Stored Cross-Site Scripting. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22519: MediaPress <= 1.6.2 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-22519 in Mediapress (CVSS 6.4): MediaPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.3.
March 18, 2026
CVE-2026-22488: Dashboard Welcome for Beaver Builder <= 1.0.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22488 in Dashboard Welcome For Beaver Builder (CVSS 5.3): Dashboard Welcome for Beaver Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22487: Speed Kit <= 2.0.2 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22487 in Baqend (CVSS 4.3): Speed Kit. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2026-22490: Bulk Landing Page Creator for WordPress LPagery <= 2.4.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22490 in Lpagery (CVSS 4.3): Bulk Landing Page Creator for WordPress LPagery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.4.10.
March 18, 2026
CVE-2025-13504: Real Estate Pro <= 2.1.4 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-13504 in Real Estate Pro (CVSS 6.1): Real Estate Pro. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2026-22518: X Addons for Elementor <= 1.0.23 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-22518 in X Addons Elementor (CVSS 6.4): X Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69350: Accordion <= 3.0.3 Authenticated (Editor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69350 in Accordions Wp (CVSS 4.4): Accordion. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.0.4.
March 18, 2026
CVE-2025-14077: Simcast <= 1.0.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
Medium CVE-2025-14077 in Simcast (CVSS 4.3): Simcast. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.