AI-Powered CVE Analysis for WordPress Plugins
We use AI to automate the differential analysis between vulnerable and patched plugin versions to understand and interpret the security issues. What we share here is research-grade proof of concept demonstrations that are then fed back into our endpoint firewall service.
WordPress Proof of Concepts
AI-assisted vulnerability analysis with PoC demonstration
March 18, 2026
CVE-2025-67926: Fluent Support <= 1.10.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-67926 in Fluent Support (CVSS 4.3): Fluent Support. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.10.5.
March 18, 2026
CVE-2026-24636: Sugar Calendar (Lite) <= 3.10.1 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24636 in Sugar Calendar Lite (CVSS 4.3): Sugar Calendar (Lite). Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67919: Woffice Core <= 5.4.30 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2025-67919 in Woffice Core (CVSS 5.3): Woffice Core. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-68507: Icegram <= 3.1.35 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68507 in Icegram (CVSS 5.3): Icegram. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.1.36.
March 18, 2026
CVE-2026-24356: GetGenie <= 4.3.0 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-24356 in Getgenie (CVSS 4.3): GetGenie. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.3.1.
March 18, 2026
CVE-2025-67923: JetEngine <= 3.7.7 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
High CVE-2025-67923 in Jet Engine (CVSS 7.2): JetEngine. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-69345: Post and Page Builder by BoldGrid <= 1.27.9 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69345 in Post And Page Builder (CVSS 4.3): Post and Page Builder by BoldGrid. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.27.10.
March 18, 2026
CVE-2025-67927: Link Whisper Free <= 0.8.8 Reflected Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2025-67927 in Link Whisper (CVSS 6.1): Link Whisper Free. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 0.8.9.
March 18, 2026
CVE-2025-68558: Depicter Slider <= 4.0.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-68558 in Depicter (CVSS 5.3): Depicter Slider. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 4.0.5.
March 18, 2026
CVE-2025-67915: Timetics <= 1.0.46 Incorrect Authorization to Authenticated (Timetics Customer+) User Creation PoC, Patch Analysis & Rule
Medium CVE-2025-67915 in Timetics (CVSS 5.3): Timetics. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 1.0.48.
March 18, 2026
CVE-2025-69091: Demo Importer Plus <= 2.0.8 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2025-69091 in Demo Importer Plus (CVSS 4.3): Demo Importer Plus. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.0.9.
March 18, 2026
CVE-2026-22466: MapIt <= 3.0.3 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22466 in Wp Mapit (CVSS 4.3): MapIt. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22468: Absolute Addons For Elementor <= 1.0.14 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22468 in Absolute Addons (CVSS 4.3): Absolute Addons For Elementor. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22462: Add Polylang support for Customizer <= 1.4.5 Cross-Site Request Forgery PoC, Patch Analysis & Rule
Medium CVE-2026-22462 in Add Polylang Support For Customizer (CVSS 4.3): Add Polylang support for Customizer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-67928: Automotive Listings <= 18.6 Unauthenticated SQL Injection PoC, Patch Analysis & Rule
High CVE-2025-67928 in Automotive (CVSS 7.5): Automotive Listings. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22464: My auctions allegro <= 3.6.33 Authenticated (Contributor+) Local File Inclusion PoC, Patch Analysis & Rule
High CVE-2026-22464 in My Auctions Allegro Free Edition (CVSS 7.5): My auctions allegro. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.6.34.
March 18, 2026
CVE-2026-22463: Form to Chat App <= 1.2.5 Authenticated (Contributor+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
Medium CVE-2026-22463 in Form To Chat (CVSS 6.4): Form to Chat App. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2026-22445: Apimo Connector <= 2.6.4 Missing Authorization PoC, Patch Analysis & Rule
Medium CVE-2026-22445 in Apimo (CVSS 5.3): Apimo Connector. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
March 18, 2026
CVE-2025-63019: Cookies and Content Security Policy <= 2.34 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
Medium CVE-2025-63019 in Cookies And Content Security Policy (CVSS 5.3): Cookies and Content Security Policy. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 2.35.
March 18, 2026
CVE-2025-47555: Tutor LMS <= 3.9.4 Authenticated (Instructor+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
Medium CVE-2025-47555 in Tutor (CVSS 4.3): Tutor LMS. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update to 3.9.5.
How Atomic Edge Works
Simple Setup. Powerful Security.
Atomic Edge acts as a security layer between your website & the internet — inspecting, filtering, and blocking malicious traffic before it ever reaches
your application.