ND Shortcodes

ND Shortcodes has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2024; all 5 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (60%). Other recurring categories include Improper Privilege Management, PHP Remote File Inclusion.

Every one of the 5 issues recorded for ND Shortcodes has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. ND Shortcodes is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ND Shortcodes vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-5220

ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records


2024-05-24 11:33	ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting ND Shortcodes <= 7.5	`CVE-2024-5220`	6.4 Medium	wesley (wcraft)	Yes
2023-06-12 00:00	ND Shortcodes <= 6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ND Shortcodes <= 6.9	`CVE-2022-4623`	6.4 Medium	István Márton	Yes
2023-06-12 00:00	ND Shortcodes <= 6.9 - Authenticated (Subscriber+) Local File Inclusion ND Shortcodes <= 6.9	`CVE-2023-1273`	6.4 Medium	Erwan LR	Yes
2022-07-01 00:00	ND Shortcodes <= 6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ND Shortcodes <= 6.5	`N/A`	6.4 Medium	Anonymous	Yes
2019-07-31 00:00	ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update ND Shortcodes < 6.0	`CVE-2019-15771`	6.1 Medium	Jerome Bruandet	Yes

Showing 1–5 of 5 reports

Latestv7.8

ND Shortcodes

Author

nicdark

3.3(13)

66/100

Last Updated

2025-03-18 (2y ago)

Active Installs

20,000+

Downloads

419,277

Requires WP

4.5+

Requires PHP

Tested up to

WP 6.7.7

Created

2016-06-15 (10y ago)

Some components in the preview below The plugin adds some useful components to your page builder ( Elementor or WP Bakery Page Builder ) that can be integrated very easily with your own theme.

View on WordPress.org