Neliosoftware
Neliosoftware Nelio AB Testing: vulnerabilidades y CVE
Neliosoftware Nelio AB Testing tiene 8 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses4
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-40742 | Media (5.3) | 0.30% | — | 15 abr 2026 | Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio AB Testing: from n/a through <=… |
| CVE-2026-32573 | Crítica (9.1) | 0.54% | — | 25 mar 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.7. |
| CVE-2026-25378 | Alta (7.6) | 0.37% | — | 19 feb 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Blind SQL Injection.This issue affects Nelio AB Testing: from… |
| CVE-2025-67944 | Crítica (9.1) | 0.57% | — | 22 ene 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.1.8. |
| CVE-2016-10977 | Media (6.5) | 2.2% | — | 17 sept 2019 | The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal. |
| CVE-2016-10927 | Crítica (10) | 1.6% | — | 22 ago 2019 | The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php. |
| CVE-2016-10926 | Crítica (10) | 1.6% | — | 22 ago 2019 | The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php. |
| CVE-2017-18547 | Alta (8.8) | 0.65% | — | 16 ago 2019 | The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.