Vulnerabilidades de Nelio Software

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Nelio Software: 10 registro(s), com severidade, exploração e correções.

Nelio AB Testing 4 Nelio Content 4 Nelio Popups 2

Somente exploradas (KEV) →

CVE-2026-57648 Média · 4.3 CWE-862 26/06/2026

WordPress Nelio Content plugin <= 4.3.4 - Broken Access Control vulnerability

Contributor Broken Access Control in Nelio Content <= 4.3.4 versions.

CVE-2026-40742 Média · 5.3 CWE-862 15/04/2026

WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio AB Testing: from n/a through <= 8.2.8.

CVE-2026-39521 Média · 4.9 CWE-918 08/04/2026

WordPress Nelio Content plugin <= 4.3.1 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: from n/a through <= 4.3.1.

CVE-2026-32573 Crítica · 9.1 CWE-94 25/03/2026

Plugin Nelio AB Testing para WordPress até 8.2.7 - Injeção de código (CWE-94)

Controle impróprio da geração de código ('Injeção de código') em vulnerabilidade na Nelio Software Nelio AB Testing nelio-ab-testing permite Injeção de código. Este problema afeta Nelio AB Testing: de n/a até <= 8.2.7.

CVE-2026-25378 Alta · 7.6 CWE-89 19/02/2026

WordPress Nelio AB Testing plugin <= 8.2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Blind SQL Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.4.

CVE-2026-25016 Média · 4.3 CWE-862 03/02/2026

WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Popups: from n/a through <= 1.3.5.

CVE-2026-24572 Alta · 8.5 CWE-89 23/01/2026

WordPress Nelio Content plugin <= 4.2.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through <= 4.2.0.

CVE-2025-67944 Crítica · 9.1 CWE-94 22/01/2026

WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.1.8.

CVE-2025-66111 Média · 6.5 CWE-79 21/11/2025

WordPress Nelio Popups plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nelio Software Nelio Popups nelio-popups allows Stored XSS.This issue affects Nelio Popups: from n/a through <= 1.3.0.

CVE-2025-62927 Média · 6.5 CWE-862 26/10/2025

WordPress Nelio Content plugin <= 4.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Content: from n/a through <= 4.0.5.