Vendor

    Nicdark

    20 known vulnerabilities in products by Nicdark, 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Nicdark
    HighCVE-2023-1273

    ND Shortcodes < 7.0 - Subscriber+ LFI

    		8.8
    HighCVE-2024-1382

    Nicdark Restaurant Reservations: PHP Remote File Inclusion

    		8.8
    HighCVE-2024-5348

    Nicdark Elements For Elementor: PHP Remote File Inclusion

    		8.8
    HighCVE-2025-47498

    WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability

    		7.5
    HighCVE-2025-39526

    WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability

    		8.1
    HighCVE-2025-53259

    WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability

    		7.5
    MediumCVE-2026-118084

    WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability

    		6.5
    HighCVE-2026-39784

    WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-114702

    WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2023-1155

    Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2021-24821

    Cost Calculator < 1.6 - Contributor+ Stored Cross-Site Scripting

    		5.4
    MediumCVE-2022-27859

    Nicdark d.o.o. Travel Management (WordPress plugin): Cross-site Scripting

    		4.1
    MediumCVE-2023-0165

    Cost Calculator <= 1.8 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2023-51403

    WordPress Restaurant Reservations Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    MediumCVE-2024-5220

    ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2025-63001

    WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2022-4623

    ND Shortcodes < 7.0 - Contributor+ Stored XSS via Shortcodes

    		5.4
    MediumCVE-2024-37223

    WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2022-29433

    Nicdark Donations (WordPress plugin): Cross-site Scripting

    also in 1 other product

    		4.1
    MediumCVE-2022-29443

    Nicdark Hotel Booking (WordPress plugin): Cross-site Scripting

    		4.1

    Products

    Products by Nicdark
    Hotel Booking70
    Cost Calculator40
    ND Shortcodes40
    Restaurant Reservations40