AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-69092: Essential Addons for Elementor <= 6.5.3 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-69092 in Essential Addons For Elementor Lite (CVSS 6.4): Essential Addons for Elementor. Atomic Edge summarizes impact, exploitability, and patch details. Update to 6.5.4.
March 18, 2026
CVE-2026-24634: Ultimate Reviews <= 3.2.16 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2026-24634 in Ultimate Reviews (CVSS 5.3): Ultimate Reviews. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.2.17.
March 18, 2026
CVE-2025-12648: WP-Members Membership Plugin <= 3.5.4.4 Unauthenticated Information Exposure via Unprotected Files PoC, Patch Analysis & Rule
Medium CVE-2025-12648 in Wp Members (CVSS 5.3): WP-Members Membership Plugin. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.5.4.5.
March 18, 2026
CVE-2026-22481: BD Courier Order Ratio Checker <= 2.0.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22481 in Bd Courier Order Ratio Checker (CVSS 4.3): BD Courier Order Ratio Checker. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67933: Taskbuilder <= 4.0.9 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-67933 in Taskbuilder (CVSS 6.1): Taskbuilder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 5.0.0.
March 18, 2026
CVE-2026-22483: teachPress <= 9.0.12 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-22483 in Teachpress (CVSS 4.3): teachPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22482: IMGspider <= 2.3.12 Authenticated (Contributor+) Server-Side Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-22482 in Imgspider (CVSS 6.4): IMGspider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69346: AffiliateX <= 1.3.9.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69346 in Affiliatex (CVSS 4.3): AffiliateX. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.4.0.
March 18, 2026
CVE-2026-22472: Easy Form Builder <= 3.9.6 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22472 in Easy Form Builder (CVSS 4.3): Easy Form Builder. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.0.
March 18, 2026
CVE-2025-67932: Listeo Core < 2.0.19 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-67932 in Listeo Core (CVSS 6.1): Listeo Core < 2.0.19 - Reflected Cross-Site Scripting. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22470: FireStorm Professional Real Estate <= 2.7.11 Authenticated (Administrator+) SQL Injection PoC, Patch Analysis & Rule
Medium CVE-2026-22470 in Fs Real Estate Plugin (CVSS 4.9): FireStorm Professional Real Estate. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-24635: EduBlink Core <= 2.0.7 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-24635 in Edublink Core (CVSS 7.5): EduBlink Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-14552: MediaPress <= 1.6.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode PoC, Patch Analysis & Rule
Medium CVE-2025-14552 in Mediapress (CVSS 6.4): MediaPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.6.2.
March 18, 2026
CVE-2025-9318: Quiz and Survey Master (QSM) <= 10.3.1 Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter PoC, Patch Analysis & Rule
Medium CVE-2025-9318 in Quiz Master Next (CVSS 6.5): Quiz and Survey Master (QSM). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 10.3.2.
March 18, 2026
CVE-2025-9294: Quiz And Survey Master <= 10.3.1 Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion PoC, Patch Analysis & Rule
Medium CVE-2025-9294 in Quiz Master Next (CVSS 4.3): Quiz And Survey Master. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 10.3.2.
March 18, 2026
CVE-2025-67930: eHive Search <= 2.5.0 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-67930 in Ehive Search (CVSS 6.1): eHive Search. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.5.1.
March 18, 2026
CVE-2025-14371: TaxoPress <= 3.41.0 Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification PoC, Patch Analysis & Rule
Medium CVE-2025-14371 in Simple Tags (CVSS 4.3): TaxoPress. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.42.0.
March 18, 2026
CVE-2025-5919: Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 Missing Authorization to Unauthenticated Booking Details View And Modification PoC, Patch Analysis & Rule
Medium CVE-2025-5919 in Timetics (CVSS 6.5): Appointment Booking and Scheduling Calendar Plugin – WP Timetics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.37.
March 18, 2026
CVE-2025-13215: Shortcodes and extra features for Phlox theme <= 2.17.13 Unauthenticated Draft Posts Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-13215 in Auxin Elements (CVSS 5.3): Shortcodes and extra features for Phlox theme. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.17.14.
March 18, 2026
CVE-2025-9637: Quiz and Survey Master (QSM) <= 10.3.1 Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads PoC, Patch Analysis & Rule
Medium CVE-2025-9637 in Quiz Master Next (CVSS 6.5): Quiz and Survey Master (QSM). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 10.3.2.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.