<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: nelio ab testing</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2016-10977: The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.</title><link>https://patchthecve.com/cve/CVE-2016-10977.html</link><guid>https://patchthecve.com/cve/CVE-2016-10977.html</guid><pubDate>Wed, 17 Jun 2026 00:40:44 +0000</pubDate><description>MEDIUM 6.5: The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.</description></item><item><title>CVE-2016-10927: The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.</title><link>https://patchthecve.com/cve/CVE-2016-10927.html</link><guid>https://patchthecve.com/cve/CVE-2016-10927.html</guid><pubDate>Wed, 17 Jun 2026 00:40:38 +0000</pubDate><description>CRITICAL 10.0: The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.</description></item><item><title>CVE-2016-10926: The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.</title><link>https://patchthecve.com/cve/CVE-2016-10926.html</link><guid>https://patchthecve.com/cve/CVE-2016-10926.html</guid><pubDate>Wed, 17 Jun 2026 00:40:38 +0000</pubDate><description>CRITICAL 10.0: The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.</description></item><item><title>CVE-2017-18547: The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.</title><link>https://patchthecve.com/cve/CVE-2017-18547.html</link><guid>https://patchthecve.com/cve/CVE-2017-18547.html</guid><pubDate>Wed, 17 Jun 2026 01:13:04 +0000</pubDate><description>HIGH 8.8: The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.</description></item></channel></rss>