Vulnerabilities

TI-2016-09015 CVE-2016-10977 · GHSA-hcq5-84v9-8hvq

The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.

LOW 33

The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02195 Published 2019-09-17 No fix listed CWE-22

TI-2016-08965 CVE-2016-10927 · GHSA-fvjh-qjcj-7cc6

MEDIUM 46

The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01649 Published 2019-08-22 No fix listed CWE-918

TI-2016-08964 CVE-2016-10926 · GHSA-r2vm-3vm4-94jg

MEDIUM 46

The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01649 Published 2019-08-22 No fix listed CWE-918

TI-2017-13720 CVE-2017-18547 · GHSA-38vr-vph7-hmrx

LOW 39

The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00649 Published 2019-08-16 No fix listed CWE-352