Known vulnerabilities in the Nelio Ab Testing plugin
8 security advisories have been published for the Nelio Ab Testing plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Nelio Ab Testing - Broken Access Control (CVE-2026-40742) MEDIUM
- Nelio Ab Testing - Remote Code Execution (CVE-2026-32573) CRITICAL
- Nelio Ab Testing - SQL Injection (CVE-2026-25378) HIGH
- Nelio Ab Testing - Remote Code Execution (CVE-2025-67944) CRITICAL
- Nelio Ab Testing - Path Traversal (CVE-2016-10977) MEDIUM
- Nelio Ab Testing - Server-Side Request Forgery (SSRF) (CVE-2016-10927) CRITICAL
- Nelio Ab Testing - Server-Side Request Forgery (SSRF) (CVE-2016-10926) CRITICAL
- Nelio Ab Testing - Cross-Site Request Forgery (CSRF) (CVE-2017-18547) HIGH