ND Shortcodes

ND Shortcodes has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; 5 are fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (67%). Other recurring categories include Improper Privilege Management, PHP Remote File Inclusion.

5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

5 independent researchers contributed these findings, one record each. ND Shortcodes is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.10.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage83%

Open

Fixed

Get automatic notifications for all ND Shortcodes vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-114702

ND Shortcodes <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

6 records


2026-10-22 08:58	ND Shortcodes <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ND Shortcodes <= 7.8	`CVE-2026-114702`	6.4 Medium	Ananda Dhakal	No
2024-05-24 11:33	ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting ND Shortcodes <= 7.5	`CVE-2024-5220`	6.4 Medium	wesley (wcraft)	Yes
2023-06-12 00:00	ND Shortcodes <= 6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ND Shortcodes <= 6.9	`CVE-2022-4623`	6.4 Medium	István Márton	Yes
2023-06-12 00:00	ND Shortcodes <= 6.9 - Authenticated (Subscriber+) Local File Inclusion ND Shortcodes <= 6.9	`CVE-2023-1273`	6.4 Medium	Erwan LR	Yes
2022-07-01 00:00	ND Shortcodes <= 6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ND Shortcodes <= 6.5	`N/A`	6.4 Medium	Anonymous	Yes
2019-07-31 00:00	ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update ND Shortcodes < 6.0	`CVE-2019-15771`	6.1 Medium	Jerome Bruandet	Yes

Showing 1–6 of 6 reports

Latestv7.8

ND Shortcodes

Author

nicdark

3.3(13)

66/100

Last Updated

2025-03-18 (2y ago)

Active Installs

20,000+

Downloads

421,234

Requires WP

4.5+

Requires PHP

Tested up to

WP 6.7.10

Created

2016-06-15 (11y ago)

Some components in the preview below The plugin adds some useful components to your page builder ( Elementor or WP Bakery Page Builder ) that can be integrated very easily with your own theme.

View on WordPress.org