Skip to contentNicdark Hotel Booking vulnerabilities
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-1180846.5 Medium
- nicdark hotel bookingHotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDORCVE-2026-841674.3 Medium
- nicdark hotel bookingHotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRFCVE-2026-841664.3 Medium
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-397847.1 High
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerabilityCVE-2025-630015.3 Medium
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.7 - Local File Inclusion VulnerabilityCVE-2025-532597.5 High
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.6 - Local File Inclusion VulnerabilityCVE-2025-474987.5 High
- nicdark hotel bookingWordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerabilityCVE-2025-395268.1 High
- nicdark hotel booking, hotel booking (wordpress plugin) +1 moreWordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesCVE-2022-294434.1 Medium