Threat database

12 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.3%	CVE-2026-94505Nelio Content – Editorial Calendar & Social Media Auto-Posting · Missing Authorization High8.1EPSS 0.3%2026-10-03CVE Database V5CVE-2026-94505 The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to permanently delete any reusable social message (nc_reusable_social post), including those authored by administrators or other privileged users. EPSS 0.3%Vulnerability nelio #cwe-862 #ghsa-j2j8-hvh9-q6jf	CVE Database V5	2026-10-03
Medium	4.3	EPSS 0.3%	CVE-2026-57648Nelio Content · Missing Authorization Medium4.3EPSS 0.3%2026-06-26CVE Database V5CVE-2026-57648 Contributor Broken Access Control in Nelio Content <= 4.3.4 versions. EPSS 0.3%Vulnerability Nelio Software #cwe-862	CVE Database V5	2026-06-26
Medium	5.3	EPSS 0.3%	CVE-2026-40742Nelio AB Testing · Missing Authorization Medium5.3EPSS 0.3%2026-04-15CVE Database V5CVE-2026-40742 Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio AB Testing: from n/a through <= 8.2.8. EPSS 0.3%Vulnerability Nelio Software	CVE Database V5	2026-04-15
Medium	4.9	EPSS 0.2%	CVE-2026-39521Nelio Content · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39521 Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: from n/a through <= 4.3.1. EPSS 0.2%Vulnerability Nelio Software	CVE Database V5	2026-04-08
Critical	9.1	EPSS 0.6%	CVE-2026-32573Nelio AB Testing · Code Injection Critical9.1EPSS 0.6%2026-03-25CVE Database V5CVE-2026-32573 Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.7. EPSS 0.6%Vulnerability Nelio Software	CVE Database V5	2026-03-25
High	7.6	EPSS 0.4%	CVE-2026-25378Nelio AB Testing · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Nelio Software… High7.6EPSS 0.4%2026-02-19CVE Database V5CVE-2026-25378 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Blind SQL Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.4. EPSS 0.4%Vulnerability Nelio Software	CVE Database V5	2026-02-19
Medium	4.3	EPSS 0.2%	CVE-2026-25016Nelio Popups · Missing Authorization Medium4.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-25016 Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Popups: from n/a through <= 1.3.5. EPSS 0.2%Vulnerability Nelio Software	CVE Database V5	2026-02-03
High	8.5	EPSS 0.4%	CVE-2026-24572Nelio Content · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Nelio Software… High8.5EPSS 0.4%2026-01-23CVE Database V5CVE-2026-24572 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through <= 4.2.0. EPSS 0.4%Vulnerability Nelio Software	CVE Database V5	2026-01-23
Critical	9.1	EPSS 0.6%	CVE-2025-67944Nelio AB Testing · Code Injection Critical9.1EPSS 0.6%2026-01-22CVE Database V5CVE-2025-67944 Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through <= 8.1.8. EPSS 0.6%Vulnerability Nelio Software	CVE Database V5	2026-01-22
Medium	6.5	EPSS 0.2%	CVE-2025-66111Nelio Popups · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Nelio Software… Medium6.5EPSS 0.2%2025-11-21CVE Database V5CVE-2025-66111 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nelio Software Nelio Popups nelio-popups allows Stored XSS.This issue affects Nelio Popups: from n/a through <= 1.3.0. EPSS 0.2%Vulnerability Nelio Software #cwe-79	CVE Database V5	2025-11-21
Medium	6.5	EPSS 0.3%	CVE-2025-62927Nelio Content · Missing Authorization Medium6.5EPSS 0.3%2025-10-27CVE Database V5CVE-2025-62927 Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Content: from n/a through <= 4.0.5. EPSS 0.3%Vulnerability Nelio Software	CVE Database V5	2025-10-27
Medium	4.9	EPSS 0.3%	CVE-2024-30531Nelio Content · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.3%2024-04-02CVE Database V5CVE-2024-30531 Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content.This issue affects Nelio Content: from n/a through 3.2.0. EPSS 0.3%Vulnerability Nelio Software #cwe-918	CVE Database V5	2024-04-02

Showing 1–12 of 12 results