nicdark vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20231
3. 20245
4. 20254
5. 20263

Newest CVEs

• CVE-2026-118084

  WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability

  nicdark · Hotel Booking

  Medium6.5
• CVE-2026-114702

  WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability

  nicdark · ND Shortcodes For Visual Composer

  Medium6.5
• CVE-2026-39784

  WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

  nicdark · Hotel Booking

  High7.1
• CVE-2025-63001

  WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability

  nicdark · Hotel Booking

  Medium5.3
• CVE-2025-53259

  WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability

  nicdark · Hotel Booking

  High7.5
• CVE-2025-47498

  WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability

  nicdark · Hotel Booking

  High7.5
• CVE-2025-39526

  WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability

  nicdark · Hotel Booking

  High8.1
• CVE-2024-37223

  WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

  Nicdark · Restaurant Reservations

  Medium6.5
• CVE-2024-5348

  Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes

  nicdark · Elements For Elementor

  High8.8
• CVE-2024-5220

  ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting

  nicdark · ND Shortcodes

  Medium6.4