Directory Traversal Vulnerability in Nelio AB Testing Plugin for WordPress

CVE-2016-10977

What is CVE-2016-10977?

The Nelio AB Testing plugin for WordPress prior to version 4.5.0 has a directory traversal vulnerability that can be exploited through a malformed filename parameter. Attackers may manipulate the request to traverse directories and access sensitive files stored on the server. This type of vulnerability poses a risk as it could allow unauthorized access to critical information, potentially leading to further exploitation. It is crucial for users of the affected plugin versions to promptly update to mitigate any security risks associated with this issue.

References