MidnightBSD

Advisories for neliosoftware

CVE-2016-10926 MEDIUM

The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-918,

Products Affected

Vendor Product Version
neliosoftware nelio_ab_testing *
CVE-2016-10927 MEDIUM

The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-918,

Products Affected

Vendor Product Version
neliosoftware nelio_ab_testing *
CVE-2016-10977 MEDIUM

The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 2.8 3.6

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-22,

Products Affected

Vendor Product Version
neliosoftware nelio_ab_testing *
CVE-2017-18547 MEDIUM

The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-352,

Products Affected

Vendor Product Version
neliosoftware nelio_ab_testing *