CVE-2026-32573 - Vulnerability Analysis

Overview

Nelio Software Nelio AB Testing <= 8.2.7 contains a code injection vulnerability caused by improper control of code generation, letting attackers execute arbitrary code remotely, exploit requires crafted input.

Severity & Score

Impact

Attackers can execute arbitrary code remotely, potentially leading to full system compromise.

Mitigation

Update to the latest version beyond 8.2.7.

References

• https://patchstack.com/database/Wordpress/Plugin/nelio-ab-testing/vulnerability/wordpress-nelio-ab-testing-plugin-8-2-7-remote-code-execution-rce-vulnerability?_s_id=cve

Social Media Activity(1 post)

Offensive Sequence

@offseq

Mar 26, 2026

🚨 CRITICAL: CVE-2026-32573 in Nelio AB Testing plugin (≤8.2.7) enables code injection on WordPress sites. No active exploits, but risk of remote code execution. Monitor for patches & harden configs. https://radar.offseq.com/threat/cve-2026-32573-improper-control-of-generation-of-c-2c0edccd #OffSeq #WordPress #Vuln

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner