CVE-2016-10926: Neliosoftware Nelio Ab Testing

Critical severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.

Affected products

• Neliosoftware Nelio Ab Testing: before 4.5.9 (fixed in 4.5.9)

Published 2019-08-22. Last modified 2026-06-17.