Nelio Software

Products

ProductCVEsExploitedLatest
Nelio Content5–Jun 26, 2026
Nelio AB Testing4–Apr 15, 2026
Nelio Popups2–Feb 3, 2026

Exploited and recent CVEs

  • CVE-2026-57648 Medium 4.3 WordPress Nelio Content plugin <= 4.3.4 - Broken Access Control vulnerability 0.3%
  • CVE-2026-40742 Medium 5.3 WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-39521 Medium 4.9 WordPress Nelio Content plugin <= 4.3.1 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2026-32573 Critical 9.1 WordPress Nelio AB Testing plugin <= 8.2.7 - Remote Code Execution (RCE) vulnerability 0.3%
  • CVE-2026-25378 High 7.6 WordPress Nelio AB Testing plugin <= 8.2.4 - SQL Injection vulnerability 0.4%
  • CVE-2026-25016 Medium 4.3 WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability 0.2%
  • CVE-2026-24572 High 8.5 WordPress Nelio Content plugin <= 4.2.0 - SQL Injection vulnerability 0.4%
  • CVE-2025-67944 Critical 9.1 WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability 0.6%
  • CVE-2025-66111 Medium 6.5 WordPress Nelio Popups plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62927 Medium 6.5 WordPress Nelio Content plugin <= 4.0.5 - Broken Access Control vulnerability 0.3%
  • CVE-2024-30531 Medium 4.9 WordPress Nelio Content plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability 0.3%