A vulnerability has been found in Abtest 1.0.6 on WordPress and classified as problematic. The impacted element is an unknown function of the file abtest_admin.php. Performing a manipulation of the argument action results in improper control of filename for include/require statement in php program (‘php remote file inclusion’). This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is known as CVE-2016-20082. Remote exploitation of the attack is possible. Furthermore, an exploit is available.