EasyTest – Simplify A/B Testing

EasyTest – Simplify A/B Testing has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for EasyTest – Simplify A/B Testing has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. EasyTest – Simplify A/B Testing is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all EasyTest – Simplify A/B Testing vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-68567

EasyTest – Simplify A/B Testing <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
EasyTest – Simplify A/B Testing banner
Latestv1.0.4

EasyTest – Simplify A/B Testing

WP Grids

Author

WP Grids

5.0(1)
100/100
Last Updated
2026-09-06 (7d ago)
Active Installs
10,000+
Downloads
13,423
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 7.1
Created
2025-03-30 (2y ago)

Not sure whether the new landing page beats the old one? Run an A/B test and find out instead of guessing. EasyTest is a split testing plugin for WordPress. You make two versions of a page, or two versions of one thing on a page such as a headline or a button. EasyTest sends half your visitors to each, counts how many convert, and shows you both conversion rates side by side. It runs entirely on your own site: No account. Install it and start. There is nothing to sign up for and nothing to connect. No visitor limit. A hundred visitors or a hundred thousand, it is the same. No monthly cap, no meter running out mid-test. Your data stays put. Every view and every conversion is a row in your own database. None of it leaves your site. Features Page A/B testing. Compare two landing pages, sales pages, or any two pages on your site. Element A/B testing. Test one part of a page instead of the whole thing. Swap a headline, a button, a price or a whole section, and leave the rest alone. Set your own traffic split. 50/50, 70/30, or whatever you want. Visitors are picked at random and keep seeing the same version if they come back. Page goals and click goals. Count a visit to a thank you page, or a click on a link or button. Click goals still work when the button goes to another site, like an external checkout. Conversion rate reporting. Views, conversions and the conversion rate for each version, and how every version compares with your control. Works with caching plugins. Only the URL that decides the split is kept out of the cache. The pages you are testing stay cached, so your site stays fast. Works with Elementor and Gutenberg. Element tests use a CSS class, so any builder or theme that lets you add one will work. What it cannot do A cache that sits in front of WordPress, like Cloudflare or a host level cache, never runs PHP, so the plugin cannot reach it. EasyTest spots these and tells you the one rule to add. Everything inside WordPress is handled for you.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C