Skip to content
PluginCanary

ND Shortcodes

by nicdark · 20,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical2 Warnings

Avoid: vulnerability published 22 Oct 2026 with no patched version yet.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for ND Shortcodes
Ownership100
Maintenance20
Security35
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-1Vulnerability published 22 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.22 Oct 2026Evidence
  • WarningMNT-2Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningMNT-1No release in 19 months (last release 18 Mar 2025). Plan a replacement if the plugin is important to your site.18 Mar 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
nicdark15 Jun 2016 to 18 Mar 2025, 199 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
20 months ago
Releases, 24 months
1
Tested up to
6.7 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for ND Shortcodes
Q1 20240
Q2 20245
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 18 Mar 2025. Tested up to 6.7, 4 major versions behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Oct 2026ND Shortcodes <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 7.8No fixn/a
24 May 2024ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 7.57.60
12 Jun 2023ND Shortcodes <= 6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 6.97.00
12 Jun 2023ND Shortcodes <= 6.9 - Authenticated (Subscriber+) Local File Inclusion6.4<= 6.97.00
1 Jul 2022ND Shortcodes <= 6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.56.60
31 Jul 2019ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update6.1< 6.06.05

Source: Wordfence Intelligence.

Reputation

Average rating 1.0 in Q4 2023.

Rating distribution
5 star7
4 star0
3 star1
2 star0
1 star5
Latest low reviews

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for ND Shortcodes
4 May 2026164
11 May 2026278
18 May 2026264
25 May 2026267
1 Jun 2026253
8 Jun 2026273
15 Jun 2026213
22 Jun 2026224
29 Jun 2026216
6 Jul 2026206
13 Jul 2026246
20 Jul 2026240
27 Jul 2026240
3 Aug 2026254
10 Aug 2026224
17 Aug 2026242
24 Aug 2026216
31 Aug 2026202
7 Sep 2026200
14 Sep 2026268
21 Sep 2026271
28 Sep 2026375
5 Oct 2026310
12 Oct 2026229
19 Oct 2026352
26 Oct 2026325
2 Nov 202655

Weekly downloads over the last 4 weeks are 2% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version7.8
Authornicdark
Added15 Jun 2016
Last updated18 Mar 2025
Active installs20,000+
Requires WordPress4.5
Tested up to6.7.11
Requires PHPnot stated
CategoryDesign & Themes > Page Builders & Visual Editors
Tagselementor, components, shortcodes, elementor library, wp bakery page builder

Other plugins by this author: Elements For Elementor, Sports Booking

Questions

Is ND Shortcodes still maintained?

ND Shortcodes was last updated on 18 Mar 2025. Its Canary status is Avoid.

Is ND Shortcodes safe?

ND Shortcodes has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns ND Shortcodes?

The wordpress.org author is nicdark. Recent committers: nicdark, plugin-master. We have recorded no ownership change.

What can I use instead of ND Shortcodes?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue