Vulnerabilities in nicdark
12 resultsVexday analysis
A nicdark apresenta 8 vulnerabilidades registradas na base do Vexday, sem exploração ativa conhecida (KEV) ou críticas em evidência. Nenhuma vulnerabilidade foi publicada nos últimos 90 dias, indicando risco estabilizado. A fraqueza dominante é CWE-98 (Dynamic Code Execution), que requer atenção em contextos de confiança de entrada de dados.
CVE-2024-1382HIGHRestaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File InclusionEPSS 0.9%CVE-2024-5348HIGHElements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget AttributesEPSS 0.8%CVE-2025-47498HIGHWordPress Hotel Booking plugin <= 3.6 - Local File Inclusion VulnerabilityEPSS 0.7%CVE-2025-39526HIGHWordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2025-53259HIGHWordPress Hotel Booking plugin <= 3.7 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2022-29433MEDIUMhttps://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerabilityEPSS 0.5%CVE-2022-29443MEDIUMWordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesEPSS 0.5%CVE-2023-1155MEDIUMCost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-51403MEDIUMWordPress Restaurant Reservations Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-5220MEDIUMND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-37223MEDIUMWordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-63001MEDIUMWordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerabilityEPSS 0.2%