Neliosoftware Nelio Ab Testing — known CVE vulnerabilities

Every CVE whose affected-product data names Neliosoftware Nelio Ab Testing, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2016-10926 — CVSS 10.0 (critical): The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.
• CVE-2016-10927 — CVSS 10.0 (critical): The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.
• CVE-2017-18547 — CVSS 8.8 (high): The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.
• CVE-2016-10977 — CVSS 6.5 (medium): The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.