Iqonic Design vulnerabilities

Products

• Kivicare 17
• Wpbookit 5
• Graphina 3

Newest

• iqonic design kivicare KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure CVE-2026-13611 5.3 MediumSeptember 1, 2026
• iqonic design kivicare KiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOR CVE-2026-19417 6.5 MediumAugust 19, 2026
• iqonic design kivicare KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR CVE-2026-19416 4.3 MediumAugust 19, 2026
• iqonic design kivicare KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration CVE-2026-13610 Public exploit 7.5 HighAugust 13, 2026
• iqonic design kivicare KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint CVE-2026-13613 8.8 HighAugust 12, 2026
• iqonic design kivicare KiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR CVE-2026-13612 4.3 MediumAugust 12, 2026
• iqonic design kivicare WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-40792 6.3 MediumJune 15, 2026
• iqonic design kivicare WordPress KiviCare plugin <= 4.3.0 - Broken Authentication vulnerability CVE-2026-42735 8.2 HighMay 27, 2026
• iqonic design kivicare WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-25383 7.1 HighMarch 25, 2026
• iqonic design kivicare WordPress KiviCare plugin <= 3.6.16 - Broken Access Control vulnerability CVE-2026-25034 6.5 MediumMarch 25, 2026
• iqonic design kivicare WordPress KiviCare plugin <= 3.6.16 - SQL Injection vulnerability CVE-2026-25022 8.5 HighFebruary 3, 2026
• iqonic design kivicare WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerability CVE-2025-66095 8.5 HighNovember 21, 2025
• iqonic design wp roadmap WordPress WP Roadmap plugin <= 2.1.3 - SQL Injection vulnerability CVE-2025-52822 8.5 HighJune 20, 2025
• iqonic design graphina WordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability CVE-2025-47533 Public exploit 8.1 HighMay 7, 2025
• iqonic design graphina WordPress Graphina plugin <= 3.0.4 - Broken Access Control Vulnerability CVE-2025-47480 5.4 MediumMay 7, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability CVE-2025-32254 5.3 MediumApril 4, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-26910 7.1 HighMarch 10, 2025
• iqonic wpbookit WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload CVE-2025-0357 9.8 CriticalJanuary 25, 2025
• iqonic wpbookit WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change CVE-2024-10215 9.8 CriticalJanuary 9, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability CVE-2024-54280 9.3 CriticalDecember 16, 2024
• iqonic design graphina WordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability CVE-2024-43124 6.5 MediumAugust 12, 2024
• iqonic kivicare WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-35659 5.3 MediumJune 8, 2024
• iqonic wp roadmap, iqonic design wp roadmap – product feedback board +1 more WordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41128 5.9 MediumNovember 30, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting CVE-2023-2624 6.1 MediumJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Multiple CSRF CVE-2023-2628 8.8 HighJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure CVE-2023-2623 6.5 MediumJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls CVE-2023-2627 4.3 MediumJune 27, 2023