Skip to content
OpenAdvisories

Vendor

Nelio Software

11 known vulnerabilities.

Products

Nelio Content 5 Nelio AB Testing 4 Nelio Popups 2
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-57648

    WordPress Nelio Content plugin <= 4.3.4 - Broken Access Control vulnerability

    Contributor Broken Access Control in Nelio Content <= 4.3.4 versions.

    Nelio Software Nelio Content
  • Medium 5.3
    CVE-2026-40742

    WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerability

    Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio AB Testing: from n/a through <= 8.2.8.

    Nelio Software Nelio AB Testing
  • Medium 4.9
    CVE-2026-39521

    WordPress Nelio Content plugin <= 4.3.1 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: from n/a through <= 4.3.1.

    Nelio Software Nelio Content
  • Medium 4.3
    CVE-2026-25016

    WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Popups: from n/a through <= 1.3.5.

    Nelio Software Nelio Popups
  • Medium 6.5
    CVE-2025-66111

    WordPress Nelio Popups plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nelio Software Nelio Popups nelio-popups allows Stored XSS.This issue affects Nelio Popups: from n/a through <= 1.3.0.

    Nelio Software Nelio Popups
  • Medium 6.5
    CVE-2025-62927

    WordPress Nelio Content plugin <= 4.0.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Content: from n/a through <= 4.0.5.

    Nelio Software Nelio Content
  • Medium 4.9
    CVE-2024-30531

    WordPress Nelio Content plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content.This issue affects Nelio Content: from n/a through 3.2.0.

    Nelio Software Nelio Content