Log in Start free

Nicdark

Products

ProductCVEsExploitedLatest
Hotel Booking6–Oct 29, 2026
Restaurant Reservations3–Jul 22, 2024
Elements For Elementor1–Jun 1, 2024
Cost Calculator1–Mar 2, 2023
ND Shortcodes1–May 25, 2024
ND Shortcodes For Visual Composer1–Oct 22, 2026
Hotel Booking (WordPress plugin)1–Jun 15, 2022
Donations (WordPress plugin)1–May 13, 2022

Exploited and recent CVEs

  • CVE-2026-118084 Medium 6.5 WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-114702 Medium 6.5 WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39784 High 7.1 WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63001 Medium 5.3 WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability 0.3%
  • CVE-2025-53259 High 7.5 WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability 0.7%
  • CVE-2025-47498 High 7.5 WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability 0.8%
  • CVE-2025-39526 High 8.1 WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability 0.7%
  • CVE-2024-37223 Medium 6.5 WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-5348 High 8.8 Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes 0.8%
  • CVE-2024-5220 Medium 6.4 ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-1382 High 8.8 Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion 0.9%
  • CVE-2023-51403 Medium 6.5 WordPress Restaurant Reservations Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-1155 Medium 6.4 Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.5%
  • CVE-2022-29443 Medium 4.1 WordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities 0.5%
  • CVE-2022-29433 Medium 4.1 https://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerability 0.6%