Iqonic vulnerabilities

Products

• Kivicare 10
• Wpbookit 9

Newest

• iqonic wpbookit WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-6057 8.8 HighJuly 12, 2025
• iqonic wpbookit WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload CVE-2025-6058 Public exploit 9.8 CriticalJuly 12, 2025
• iqonic wpbookit WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update CVE-2025-3811 9.8 CriticalMay 9, 2025
• iqonic wpbookit WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover CVE-2025-3810 9.8 CriticalMay 9, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability CVE-2025-32254 5.3 MediumApril 4, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-26910 7.1 HighMarch 10, 2025
• iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter CVE-2025-1572 6.5 MediumFebruary 28, 2025
• iqonic wpbookit WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload CVE-2025-0357 9.8 CriticalJanuary 25, 2025
• iqonic wpbookit WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change CVE-2024-10215 9.8 CriticalJanuary 9, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability CVE-2024-54280 9.3 CriticalDecember 16, 2024
• iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection CVE-2024-11729 6.5 MediumDecember 6, 2024
• iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection CVE-2024-11730 6.5 MediumDecember 6, 2024
• iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection CVE-2024-11728 Public exploit EPSS 13.6% 7.5 HighDecember 6, 2024
• iqonic kivicare WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-35659 5.3 MediumJune 8, 2024
• iqonic wp roadmap, iqonic design wp roadmap – product feedback board +1 more WordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41128 5.9 MediumNovember 30, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting CVE-2023-2624 6.1 MediumJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Multiple CSRF CVE-2023-2628 8.8 HighJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure CVE-2023-2623 6.5 MediumJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls CVE-2023-2627 4.3 MediumJune 27, 2023
• iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare < 2.3.9 - Unauthenticated SQLi CVE-2022-0786 EPSS 13.3% 9.8 CriticalJune 13, 2022