Vulnerabilities
4 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2016-10977 | The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal. The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal. NVD description · AI analysis pending | 6.5 | 2% | PoC |
| — | |
| CVE-2016-10927 +1 in the same advisory: …10926 | The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php. The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php. NVD description · AI analysis pending | 10.0 | 2% |
| — | ||
| CVE-2017-18547 | The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms. The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms. NVD description · AI analysis pending | 8.8 | <1% |
| — |