Skip to content
OpenAdvisories

Vendor

nicdark

15 known vulnerabilities.

Products

Hotel Booking 6 Restaurant Reservations 3 Hotel Booking (WordPress plugin) 1 Cost Calculator 1 ND Shortcodes 1 Donations (WordPress plugin) 1 Elements For Elementor 1 ND Shortcodes For Visual Composer 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2026-39784

    WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.

    nicdark Hotel Booking
  • High 7.5
    CVE-2025-53259

    WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nicdark Hotel Booking nd-booking allows PHP Local File Inclusion.This issue affects Hotel Booking: from n/a through <= 3.7.

    nicdark Hotel Booking
  • High 7.5
    CVE-2025-47498

    WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nicdark Hotel Booking nd-booking allows PHP Local File Inclusion.This issue affects Hotel Booking: from n/a through <= 3.6.

    nicdark Hotel Booking
  • High 8.1
    CVE-2025-39526

    WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nicdark Hotel Booking nd-booking allows PHP Local File Inclusion.This issue affects Hotel Booking: from n/a through <= 3.6.

    nicdark Hotel Booking
  • High 8.8
    CVE-2024-5348

    Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes

    The Elements For Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.1 via the 'beforeafter_layout' attribute of the beforeafter widget, the 'eventsgrid_layout' attribute of the eventsgrid and list widg…

    nicdark Elements For Elementor Web / CMS
  • High 8.8
    CVE-2024-1382

    Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion

    The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the nd_rst_layout attribute of the nd_rst_search shortcode. This makes it possible for authenticated attackers, with contribut…

    nicdark Restaurant Reservations Web / CMS