Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Vendor: Nelio Software Clear all filters
TI-2026-29411 CVE-2026-40742 · GHSA-h93w-324f-xffx

WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerability

Priority LOW 29

Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio AB Testing: from n/a through <= 8.2…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00187 Published 2026-04-15 No fix listed CWE-862
TI-2026-25095 CVE-2026-32573 · GHSA-8x4j-65f5-6g6x

WordPress Nelio AB Testing plugin <= 8.2.7 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 41

Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.7.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00303 Published 2026-03-25 No fix listed CWE-94
TI-2026-20496 CVE-2026-25378 · GHSA-vjf2-j9mf-px53

WordPress Nelio AB Testing plugin <= 8.2.4 - SQL Injection vulnerability

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Blind SQL Injection.This issue affects Nelio AB Testing: from…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00398 Published 2026-02-19 No fix listed CWE-89
TI-2026-20201 CVE-2026-25016 · GHSA-6f9v-56p4-5qf4

WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Popups: from n/a through <= 1.3.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2026-02-03 No fix listed CWE-862
TI-2026-19812 CVE-2026-24572 · GHSA-vr93-q3r9-7q5f

WordPress Nelio Content plugin <= 4.2.0 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a throu…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00356 Published 2026-01-23 No fix listed CWE-89
TI-2025-41553 CVE-2025-67944 · GHSA-4r7c-fr6m-vgjf

WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability

Priority MEDIUM 42

Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.1.8.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00581 Published 2026-01-22 No fix listed CWE-94
TI-2025-40636 CVE-2025-66111 · GHSA-j89p-93xp-xgv5

WordPress Nelio Popups plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nelio Software Nelio Popups nelio-popups allows Stored XSS.This issue affects Nelio Popups: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-11-21 No fix listed CWE-79
TI-2025-39075 CVE-2025-62927 · GHSA-cj42-frrm-vcmv

WordPress Nelio Content plugin <= 4.0.5 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Content: from n/a through <= 4.0.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0033 Published 2025-10-27 No fix listed CWE-862