Local File Inclusion Vulnerability in Nicdark Hotel Booking Plugin

CVE-2025-53259

What is CVE-2025-53259?

The Nicdark Hotel Booking plugin is susceptible to a Local File Inclusion vulnerability due to improper control of filename during include or require statements. This flaw can potentially allow attackers to exploit the system, leading to unauthorized access to sensitive files or data within the server's file system. The vulnerability is present in versions from n/a through 3.7, posing a risk to websites utilizing this plugin. Users are recommended to review their configurations and update their installations to mitigate this security threat.

References