WordPress plugin
Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High5
- Medium3
- Low0
All Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Editor+) Remote Code Execution ≤8.2.7Update to 8.2.8 | CVE-2026-32573 | |
| Medium5.3 | Unauthenticated Information Exposure ≤8.2.8Update to 8.3.0 | CVE-2026-40742 | |
| Medium4.9 | Authenticated (Editor+) SQL Injection ≤8.2.4Update to 8.2.5 | CVE-2026-25378 | |
| High7.2 | Authenticated (Editor+) Remote Code Execution ≤8.1.8Update to 8.2.0 | CVE-2025-67944 | |
| High8.8 | Cross-Site Request Forgery <4.6.4Update to 4.6.4 | CVE-2017-18547 | |
| High7.2 | Server-Side Request Forgery <4.5.11Update to 4.5.11 | CVE-2016-10927 | |
| High8.3 | Server Side Request Forgery ≤4.5.8Update to 4.5.9 | CVE-2016-10926 | |
| Medium6.5 | Directory Traversal ≤4.4.4Update to 4.5.0 | CVE-2016-10977 |
- High7.2Authenticated (Editor+) Remote Code Execution
≤8.2.7Update to 8.2.8
- Medium5.3Unauthenticated Information Exposure
≤8.2.8Update to 8.3.0
- Medium4.9Authenticated (Editor+) SQL Injection
≤8.2.4Update to 8.2.5
- High7.2Authenticated (Editor+) Remote Code Execution
≤8.1.8Update to 8.2.0
- High8.8Cross-Site Request Forgery
<4.6.4Update to 4.6.4
- High7.2Server-Side Request Forgery
<4.5.11Update to 4.5.11
- High8.3Server Side Request Forgery
≤4.5.8Update to 4.5.9
- Medium6.5Directory Traversal
≤4.4.4Update to 4.5.0
Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization: common questions
Does Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization: 5 high, 3 medium. None are known to affect version null.
How do I check which version of Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization vulnerability?
CVE-2026-32573, published Mar 23, 2026: Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization <= 8.2.7 - Authenticated (Editor+) Remote Code Execution. Severity: High (CVSS 7.2).
Is any Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization vulnerability listed in CISA KEV?
No. None of the known Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization vulnerabilities is currently listed in the CISA KEV catalog.