Skip to contentIqonic Kivicare vulnerabilities
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' ParameterCVE-2025-15726.5 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL InjectionCVE-2024-117296.5 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL InjectionCVE-2024-117306.5 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL InjectionCVE-2024-11728Public exploitEPSS 13.6%7.5 High
- iqonic kivicareWordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-356595.3 Medium
- iqonic kivicareKiviCare Management System < 3.2.1 - Reflected Cross-Site ScriptingCVE-2023-26246.1 Medium
- iqonic kivicareKiviCare Management System < 3.2.1 - Multiple CSRFCVE-2023-26288.8 High
- iqonic kivicareKiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information DisclosureCVE-2023-26236.5 Medium
- iqonic kivicareKiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX CallsCVE-2023-26274.3 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare < 2.3.9 - Unauthenticated SQLiCVE-2022-0786EPSS 13.3%9.8 Critical