Read the docs

Nelio Software

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Nelio Software records in CISA KEV

No Nelio Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nelio Ab Testing 4 records MEDIUM

Records

15 records

TI-2025-41553 CVE-2025-67944 · GHSA-4r7c-fr6m-vgjf

WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability

Priority MEDIUM 42

Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.1.8.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00581 Published 2026-01-22 No fix listed CWE-94
TI-2026-25095 CVE-2026-32573 · GHSA-8x4j-65f5-6g6x

WordPress Nelio AB Testing plugin <= 8.2.7 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 41

Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.7.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00303 Published 2026-03-25 No fix listed CWE-94
TI-2026-19812 CVE-2026-24572 · GHSA-vr93-q3r9-7q5f

WordPress Nelio Content plugin <= 4.2.0 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a throu…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00356 Published 2026-01-23 No fix listed CWE-89
TI-2026-20496 CVE-2026-25378 · GHSA-vjf2-j9mf-px53

WordPress Nelio AB Testing plugin <= 8.2.4 - SQL Injection vulnerability

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Blind SQL Injection.This issue affects Nelio AB Testing: from…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00398 Published 2026-02-19 No fix listed CWE-89
TI-2026-29411 CVE-2026-40742 · GHSA-h93w-324f-xffx

WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerability

Priority LOW 29

Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio AB Testing: from n/a through <= 8.2…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00187 Published 2026-04-15 No fix listed CWE-862
TI-2025-39075 CVE-2025-62927 · GHSA-cj42-frrm-vcmv

WordPress Nelio Content plugin <= 4.0.5 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Content: from n/a through <= 4.0.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0033 Published 2025-10-27 No fix listed CWE-862
TI-2025-40636 CVE-2025-66111 · GHSA-j89p-93xp-xgv5

WordPress Nelio Popups plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nelio Software Nelio Popups nelio-popups allows Stored XSS.This issue affects Nelio Popups: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-11-21 No fix listed CWE-79
TI-2026-20201 CVE-2026-25016 · GHSA-6f9v-56p4-5qf4

WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Popups: from n/a through <= 1.3.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2026-02-03 No fix listed CWE-862
Open these records in search →