Known vulnerabilities in Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization

A/B Testing, conversion rate optimization, and beautiful Heatmaps with AI Assistance.

8Reported vulnerabilities

10Highest CVSS score

8.5.2Latest version

4,000+Active installs

What to do now

Update Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization to 8.2.8 or later. 8 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2016-10977	Medium 6.5	2.2%	Before 4.5.0	`4.5.0`	September 17, 2019
CVE-2016-10927	Critical 10	1.6%	Before 4.5.11	`4.5.11`	August 22, 2019
CVE-2016-10926	Critical 10	1.6%	Before 4.5.9	`4.5.9`	August 22, 2019
CVE-2017-18547	High 8.8	0.6%	Before 4.6.4	`4.6.4`	August 16, 2019
CVE-2026-32573	High 7.2	0.3%	8.2.7 and earlier	`8.2.8`	March 23, 2026
CVE-2025-67944	High 7.2	0.5%	8.1.8 and earlier	`8.2.0`	January 20, 2026
CVE-2026-40742	Medium 5.3	0.2%	8.2.8 and earlier	`8.3.0`	March 17, 2026
CVE-2026-25378	Medium 4.9	0.4%	8.2.4 and earlier	`8.2.5`	February 19, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.