The nelio-ab-testing plugin prior to 4.5.0 for WordPress has filename=..%2f directory traversal.
neliosoftware nelio ab testing