PT-2026-20717 · Nelio · Nelio Ab Testing

Nguyen Ba Khanh · Published 2026-02-19 · Updated 2026-02-19 · CVE-2026-25378

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Nelio AB Testing versions through 8.2.4

Description Nelio AB Testing contains a flaw related to improper neutralization of special elements used in SQL commands, specifically a Blind SQL Injection issue. This allows for potential unauthorized access or manipulation of the database.

Recommendations Update Nelio AB Testing to a version newer than 8.2.4.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-25378

Affected Products

Nelio Ab Testing

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25378 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/nelio-ab-testing/vulnerability/wordpress-nelio-ab-testing-plugin-8-2-4-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2024411367973728392 · Twitter Post