NI
Vendor
nicdark
17
CVEs
0
On KEV
2
New 30D
Products
HB8.1
Hotel Booking
nicdark
6 CVEs0 on KEV1 new
NS6.5
ND Shortcodes For Visual Composer
nicdark
1 CVEs0 on KEV1 new
CC5.4
Cost Calculator
Nicdark
3 CVEs0 on KEV0 new
NS8.8
ND Shortcodes
nicdark
3 CVEs0 on KEV0 new
RR5.4
Restaurant Reservations
Nicdark
2 CVEs0 on KEV0 new
EF8.8
Elements For Elementor
nicdark
1 CVEs0 on KEV0 new
ND5.4
Nd-travel
Nicdark
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114702 | NS ND Shortcodes For Visual Composer nicdark | 6.5 | Oct 22 | WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39784 | HB Hotel Booking nicdark | 7.1 | Oct 6 | WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-63001 | HB Hotel Booking nicdark | 5.3 | Dec 31 | WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability |
| CVE-2025-53259 | HB Hotel Booking nicdark | 7.5 | Jun 27 | WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability |
| CVE-2025-47498 | HB Hotel Booking nicdark | 7.5 | May 7 | WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability |
| CVE-2025-39526 | HB Hotel Booking nicdark | 8.1 | Apr 17 | WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability |
| CVE-2024-37223 | RR Restaurant Reservations Nicdark | 5.4 | Jul 22 | WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5348 | EF Elements For Elementor nicdark | 8.8 | Jun 1 | Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes |
| CVE-2024-5220 | NS ND Shortcodes nicdark | 5.4 | May 25 | ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting |
| CVE-2023-51403 | RR Restaurant Reservations Nicdark | 5.4 | Feb 12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects… |
| CVE-2023-1273 | NS ND Shortcodes Nicdark | 8.8 | Jul 4 | The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any… |
| CVE-2022-4623 | NS ND Shortcodes Nicdark | 5.4 | Jul 4 | The ND Shortcodes WordPress plugin before 7.0 does not validate and escape numerous of its shortcode attributes before outputting them back in a page/post where the shortcode is… |
| CVE-2023-0165 | CC Cost Calculator Nicdark | 5.4 | Mar 6 | The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is… |
| CVE-2023-1155 | CC Cost Calculator Nicdark | 5.4 | Mar 2 | The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_icon parameter in versions up to, and including, 1.8 due to… |
| CVE-2022-29443 | HB Hotel Booking Nicdark | 5.4 | Jun 15 | Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's Hotel Booking plugin <= 3.0 at WordPress |
| CVE-2022-27859 | ND Nd-travel Nicdark | 5.4 | Jun 15 | Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark d.o.o |
| CVE-2021-24821 | CC Cost Calculator Nicdark | 5.4 | Mar 7 | The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost… |