Nicdark vulnerabilities

Products

• Hotel Booking 8
• Cost Calculator 3
• Nd Shortcodes 3
• Nd Shortcodes 3
• Restaurant Reservations 3

Newest

• nicdark hotel booking WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-118084 6.5 MediumOctober 29, 2026
• nicdark nd shortcodes for visual composer WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-114702 6.5 MediumOctober 22, 2026
• nicdark hotel booking Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR CVE-2026-84167 4.3 MediumOctober 12, 2026
• nicdark hotel booking Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRF CVE-2026-84166 4.3 MediumOctober 12, 2026
• nicdark hotel booking WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-39784 7.1 HighOctober 6, 2026
• nicdark hotel booking WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability CVE-2025-63001 5.3 MediumDecember 31, 2025
• nicdark hotel booking WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability CVE-2025-53259 7.5 HighJune 27, 2025
• nicdark hotel booking WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability CVE-2025-47498 7.5 HighMay 7, 2025
• nicdark hotel booking WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability CVE-2025-39526 8.1 HighApril 17, 2025
• nicdark restaurant reservations, nicdarkthemes restaurant food +1 more WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-37223 6.5 MediumJuly 22, 2024
• nicdark elements for elementor Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes CVE-2024-5348 8.8 HighJune 1, 2024
• nicdark nd shortcodes ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-5220 6.4 MediumMay 25, 2024
• nicdark restaurant reservations Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion CVE-2024-1382 8.8 HighMarch 7, 2024
• nicdark restaurant reservations WordPress Restaurant Reservations Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51403 6.5 MediumFebruary 12, 2024
• nicdark nd shortcodes ND Shortcodes < 7.0 - Subscriber+ LFI CVE-2023-1273 8.8 HighJuly 4, 2023
• nicdark nd shortcodes ND Shortcodes < 7.0 - Contributor+ Stored XSS via Shortcodes CVE-2022-4623 5.4 MediumJuly 4, 2023
• nicdark cost calculator Cost Calculator <= 1.8 - Contributor+ Stored XSS CVE-2023-0165 5.4 MediumMarch 6, 2023
• nicdark cost calculator Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-1155 6.4 MediumMarch 2, 2023
• nicdark hotel booking, hotel booking (wordpress plugin) +1 more WordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities CVE-2022-29443 4.1 MediumJune 15, 2022
• nicdark nd-travel, nicdark d.o.o. travel management (wordpress plugin) +1 more WordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities CVE-2022-27859 4.1 MediumJune 15, 2022
• donations project donations, nicdark donations (wordpress plugin) +1 more https://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerability CVE-2022-29433 4.1 MediumMay 13, 2022
• nicdark cost calculator Cost Calculator < 1.6 - Contributor+ Stored Cross-Site Scripting CVE-2021-24821 5.4 MediumMarch 7, 2022