AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2026-22521: Handmade Framework <= 3.9 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-22521 in Handmade Framework (CVSS 7.5): Handmade Framework. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14053: Travel Bucket List <= 0.5.2 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2025-14053 in Wish To Go (CVSS 6.4): Travel Bucket List. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22489: Image Slider Slideshow <= 1.8 Authenticated (Contributor+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-22489 in Image Slider Slideshow (CVSS 4.3): Image Slider Slideshow. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14109: AH Shortcodes <= 1.0.2 Authenticated (Contributor+) Stored Cross-Site Scripting via 'column' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2025-14109 in Ah Shortcodes (CVSS 6.4): AH Shortcodes. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2025-14352: Awesome Hotel Booking <= 1.0.3 Incorrect Authorization to Unauthenticated Arbitrary Booking Modification PoC, Patch Analysis & Rule
Medium CVE-2025-14352 in Awesome Hotel Booking (CVSS 5.3): Awesome Hotel Booking. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-13722: Fluent Forms <= 6.1.7 Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder PoC, Patch Analysis & Rule
Medium CVE-2025-13722 in Fluentform (CVSS 5.3): Fluent Forms. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 6.1.8.
March 18, 2026
CVE-2025-14112: Snillrik Restaurant <= 2.3.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'menu_style' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2025-14112 in Snillrik Restaurant Menu (CVSS 6.4): Snillrik Restaurant. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.3.1.
March 18, 2026
CVE-2025-14127: Testimonial Master <= 0.2.1 Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] PoC, Patch Analysis & Rule
Medium CVE-2025-14127 in Testimonial Master (CVSS 6.1): Testimonial Master. Atomic Edge summarizes impact, exploitability, and patch details.
March 18, 2026
CVE-2025-13849: Cool YT Player <= 1.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2025-13849 in Cool Yt Player (CVSS 6.4): Cool YT Player. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-13974: Email Customizer for WooCommerce | Drag and Drop Email Templates Builder <= 2.6.7 Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content PoC, Patch Analysis & Rule
Medium CVE-2025-13974 in Email Customizer For Woocommerce (CVSS 4.4): Email Customizer for WooCommerce | Drag and Drop Email Templates Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage...
March 18, 2026
CVE-2025-14453: My Album Gallery <= 1.0.4 Authenticated (Contributor+) Stored Cross-Site Scripting via 'style_css' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2025-14453 in My Album Gallery (CVSS 6.4): My Album Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14796: My Album Gallery <= 1.0.4 Authenticated (Author+) Stored Cross-Site Scripting via Image Title PoC, Patch Analysis & Rule
Medium CVE-2025-14796 in My Album Gallery (CVSS 6.4): My Album Gallery. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-13418: Responsive Pricing Table <= 5.1.12 Authenticated (Author+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-13418 in Dk Pricr Responsive Pricing Table (CVSS 6.4): Responsive Pricing Table. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.1.13.
March 18, 2026
CVE-2025-15058: Responsive Pricing Table <= 5.1.12 Authenticated (Contributor+) Stored Cross-Site Scripting via 'table_currency' PoC, Patch Analysis & Rule
Medium CVE-2025-15058 in Dk Pricr Responsive Pricing Table (CVSS 6.4): Responsive Pricing Table. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.1.13.
March 18, 2026
CVE-2025-14122: AD Sliding FAQ <= 2.4 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2025-14122 in Ad Sliding Faq (CVSS 6.4): AD Sliding FAQ. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14145: Niche Hero | Beautifully-designed blocks in seconds <= 1.0.5 Authenticated (Contributor+) Stored Cross-Site Scripting via 'spacing' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2025-14145 in Niche Hero (CVSS 6.4): Niche Hero | Beautifully-designed blocks in seconds. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14113: Viitor Button Shortcodes <= 3.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute PoC, Patch Analysis & Rule
Medium CVE-2025-14113 in Viitor Shortcodes (CVSS 6.4): Viitor Button Shortcodes. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14057: Multi-column Tag Map <= 17.0.39 Authenticated (Administrator+) Stored Cross-Site Scripting via 'mctm_css_conditional' Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-14057 in Multi Column Tag Map (CVSS 4.4): Multi-column Tag Map. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14626: QR Code for WooCommerce order emails, PDF invoices, packing slips <= 1.9.42 Authenticated (Contributor+) Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2025-14626 in Qr Code Tag For Wc From Goaskle Com (CVSS 6.4): QR Code for WooCommerce order emails, PDF invoices, packing slips. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-13848: STM Gallery 1.9 <= 0.9 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
Medium CVE-2025-13848 in Stm Gallery (CVSS 6.4): STM Gallery 1.9. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.