CVE-2016-10927: Neliosoftware Nelio Ab Testing

Critical severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.

Affected products

• Neliosoftware Nelio Ab Testing: before 4.5.11 (fixed in 4.5.11)

Published 2019-08-22. Last modified 2026-06-17.