Personizely — A/B Testing, Personalization, Popups & CRO

Personizely — A/B Testing, Personalization, Popups & CRO has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Personizely — A/B Testing, Personalization, Popups & CRO has a vendor fix available, so running the current release closes it.

All of these findings were reported by Peter Thaleikis. Personizely — A/B Testing, Personalization, Popups & CRO is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Personizely — A/B Testing, Personalization, Popups & CRO vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-3779

Personizely <= 0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via widgetId Parameter

Read the full analysis

Vulnerability Records

1 records
Personizely — A/B Testing, Personalization, Popups & CRO banner
Latestv0.12

Personizely — A/B Testing, Personalization, Popups & CRO

Sergiu Cazac

Author

Sergiu Cazac

4.8(25)
96/100
Last Updated
2026-03-16 (6mo ago)
Active Installs
300+
Downloads
15,633
Requires WP
3.1+
Requires PHP
5.3+
Tested up to
WP 6.9.7
Created
2019-09-08 (7y ago)

Personizely helps you improve your website performance through A/B testing, real-time personalization, and engaging popups. It’s an all-in-one optimization toolkit that allows marketers and developers to test ideas, tailor content to each visitor, and convert more traffic — all without writing code. With Personizely, you can easily experiment with different versions of pages and elements, personalize user experiences, and display targeted popups that encourage visitors to subscribe, buy, or engage before leaving your site. Create a Personizely account for free now Book a live demo Find out more about Personizely Key Features A/B Testing Run experiments to discover what works best. Test popup variations, landing page URLs, and on-page content elements such as headlines, buttons, or images. Review results directly in your Personizely dashboard to make confident, data-driven decisions. Personalization & Targeting Deliver relevant experiences for every visitor. Show personalized messages based on factors like geographic location, device type, referral source, and on-site behavior. Segment your audience and adapt campaigns for new vs. returning users. Popups & Widgets Build and launch popups, bars, callouts, and embedded forms using a simple drag-and-drop builder. Choose from pre-made templates for lead generation, sales promotions, or announcements, or design your own from scratch. All popups are mobile-responsive and fully customizable. Analytics Monitor results with reliable performance analytics. Understand views, click-throughs, and conversions in real time. Combine insights from A/B testing and personalization campaigns to continuously improve user experience and conversion rates. Behavioral Triggers Engage users based on behavior. Trigger popups on exit intent, scroll depth, link clicks, or time on page. Customize when and where popups appear to maximize relevance and impact. Integrations Seamlessly connect Personizely with leading email, CRM, and analytics platforms such as Klaviyo, Omnisend, HubSpot, Mailchimp, Google Analytics, Heap, Mixpanel, Segment, and Microsoft Clarity. You can also use Zapier or webhooks to integrate Personizely with the rest of your marketing stack. How It Works Install the Personizely plugin and connect your account. Create your first A/B test, personalization rule, or popup campaign. Set display and targeting options. Launch and track performance in the analytics dashboard. Use Cases Run A/B tests to improve content and design. Personalize messaging for different audience segments. Capture more leads with targeted popups. Reduce cart abandonment and increase conversions.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C