Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization
Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 8 are fixed as of October 2026. Their average CVSS score is 6.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 5 high. 2026 was the busiest year with 4 disclosures.
The most common weakness is Code Injection, behind 2 of the records (25%). Other recurring categories include Server-Side Request Forgery (SSRF), Cross-Site Request Forgery (CSRF).
Every one of the 8 issues recorded for Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, most of them (2) reported by daroo. Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2017-18547Nelio AB Testing < 4.6.4 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization
Author
Nelio Software
A/B testing and heatmaps for WordPress and WooCommerce — no coding required. Discover which changes work better for your visitors. Nelio A/B Testing lets you create experiments, measure conversions, and analyze visitor behavior directly from your WordPress dashboard. Test pages, posts, headlines, WooCommerce products and pricing, menus, themes, CSS, and more. Use heatmaps, clickmaps, and scrollmaps to understand how people interact with your content and make better-informed decisions. Start for free with 500 tested page views per month. If your site needs more testing traffic or advanced features, explore our premium plans. “Nelio A/B Testing has been a game changer for our web strategy. It empowered us to make decisions based on data, not instinct. The simplicity, affordability, and impact have been exceptional.” Quentin Molinié, Co-founder of Darwin Nutrition | Case Studies Why Choose Nelio A/B Testing? – Made for WordPress. Create and manage experiments in your WordPress dashboard without needing to implement a separate testing interface. – Test more than landing pages. Compare content, design changes, product information, and other elements that matter to your site. – Measure real goals. Analyze conversion rates, confidence levels, and visitor data instead of relying on guesses. – See visitor behavior. Use heatmaps and scrollmaps alongside your experiments to discover potential improvements. – Save time. Apply winning alternatives automatically when appropriate. – Supported and maintained. Get documentation, updates, and help from the Nelio team. Features at a Glance A/B and Multivariate Testing. Compare page designs, content alternatives, and individual changes. Conversion Tracking and Reports. Review conversion rates, confidence levels, and visitor statistics. Heatmaps, Clickmaps, and Scrollmaps. Understand how visitors interact with your pages. WooCommerce Experiments. Test product titles, descriptions, images, pricing, and product-related changes. Automatic Winner Deployment. Apply the winning alternative without manually rebuilding it. Segmentation and Targeting. Run experiments for specific devices, referrers, locations, or visitor behavior. WordPress Editor and Page Builder Compatibility. Work with Gutenberg, Elementor, and other popular editors. Custom CSS and JavaScript Experiments. Test changes beyond ordinary page content. Multisite and Localization Support. Use Nelio across WordPress multisite installations and available translations. AI-Assisted Test Suggestions. Explore suggested experiment ideas where this feature is available. Privacy-Conscious Design. Experiment tracking does not store sensitive or personal visitor data. Caching-Aware Integration. Designed to work with WordPress caching and optimization setups; configuration may vary by site. A/B Testing for WooCommerce Find out which product presentation works best for your store. Nelio A/B Testing supports WooCommerce product experiments, including alternative product titles, descriptions, images, and prices. Use conversion goals and experiment reports to compare the outcomes of your changes. You can also experiment with the pages and other content that lead customers toward a purchase. This makes Nelio useful for testing both product information and the wider shopping experience. What You Can Test – Pages and Posts – Headlines – Content Templates – WordPress Synced Patterns – Menus and Widgets – WooCommerce Products and Pricing – Custom JavaScript and CSS Snippets – Entire Site Designs – Custom Post Types – Popups – PHP Hooks (for devs) GDPR and Privacy We take privacy seriously. Nelio A/B Testing is designed to run experiments without storing sensitive or personal visitor data as part of experiment tracking. As with any analytics tool, review your site’s privacy obligations and configuration before using it. External Service Nelio A/B Testing relies on Nelio’s cloud services to provide its A/B testing functionality. The plugin communicates with Nelio’s servers to manage tests, process and store test results, and provide other features of the service. Nelio may also collect usage and activity information about how you interact with the plugin, as described in our Privacy Policy. Before using Nelio A/B Testing, you are required to accept our Terms and Conditions and Privacy Policy. These documents explain the service, the information we collect and process, and how that information is used. Free vs Premium Free: Create experiments and explore heatmaps on smaller sites, with up to 500 tested page views per month. The limit applies to tested page views, not necessarily all visits to your website. Premium: Choose a plan with higher testing traffic limits, additional advanced features, and priority support. See the current plans and pricing for exact limits and included features. You can create multiple tests on the free plan, but the shared monthly page-view quota means it may be more practical to focus on one experiment at a time. Nelio A/B Testing — WordPress A/B testing, WooCommerce experiments, and heatmaps in one plugin.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C