TI-2016-08965 CVE-2016-10927 · GHSA-fvjh-qjcj-7cc6
The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.
Priority MEDIUM 46
The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.
Nelio Software
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Nelio Software records in CISA KEVNo Nelio Software vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Nelio Ab Testing · all components
TI-2016-08964 CVE-2016-10926 · GHSA-r2vm-3vm4-94jg
The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.
Priority MEDIUM 46
The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.
TI-2017-13720 CVE-2017-18547 · GHSA-38vr-vph7-hmrx
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.
Priority LOW 39
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.
TI-2016-09015 CVE-2016-10977 · GHSA-hcq5-84v9-8hvq
The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.
Priority LOW 33
The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.