Skip to content

Iqonicdesign vulnerabilities

Products

Newest

iqonicdesign graphina – charts and graphs for elementor Graphina <= 3.1.13 - Unauthenticated Stored Cross-Site Scripting via Tree Chart Widget Settings CVE-2026-110291 7.2 HighNovember 6, 2026
iqonic designs graphina – charts and graphs for elementor WordPress Graphina plugin <= 3.1.12 - Broken Authentication vulnerability CVE-2026-39769 7.5 HighOctober 6, 2026
iqonicdesign graphina – charts and graphs for elementor Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting CVE-2026-13709 6.4 MediumSeptember 9, 2026
iqonicdesign kivicare – clinic & patient management system (ehr) KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameter CVE-2026-15453 6.5 MediumAugust 15, 2026
iqonicdesign streamit Streamit < 4.5.2 - Unauthenticated Remote Code Execution via Arbitrary Function Call CVE-2026-13423 9.8 CriticalJuly 29, 2026
iqonic designs graphina – charts and graphs for elementor WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability CVE-2026-65529 5.3 MediumJuly 23, 2026
iqonicdesign kivicare – clinic & patient management system (ehr) KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilder CVE-2026-15072 6.5 MediumJuly 11, 2026
iqonicdesign kivicare – clinic & patient management system (ehr) KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionController CVE-2026-15073 6.5 MediumJuly 11, 2026
iqonicdesign kivicare – clinic & patient management system (ehr) KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST Endpoint CVE-2026-11990 5.3 MediumJuly 10, 2026
iqonicdesign wpbookit pro WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Escalation vulnerability CVE-2026-25414 8.8 HighMarch 25, 2026
iqonicdesign wpbookit pro WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerability CVE-2026-25413 9.9 CriticalMarch 25, 2026
iqonicdesign kivicare – clinic & patient management system (ehr) KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard CVE-2026-2992 8.2 HighMarch 18, 2026
iqonicdesign kivicare – clinic & patient management system (ehr) KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token CVE-2026-2991 Public exploit 7.3 HighMarch 18, 2026
iqonicdesign wpbookit WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure CVE-2026-1980 5.3 MediumMarch 4, 2026
iqonicdesign wpbookit WPBookit <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting via 'wpb_user_name' and 'wpb_user_email' Parameters CVE-2026-1945 7.2 HighMarch 4, 2026
iqonicdesign wpbookit pro WordPress WPBookit Pro plugin <= 1.6.18 - Broken Access Control vulnerability CVE-2026-25415 5.3 MediumFebruary 19, 2026
iqonicdesign kivicare – clinic & patient management system (ehr) KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload CVE-2026-0927 5.3 MediumJanuary 23, 2026
iqonicdesign wpbookit WPBookit <= 1.0.7 - Customer Deletion via CSRF CVE-2025-12685 6.5 MediumJanuary 2, 2026
iqonicdesign wpbookit WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting CVE-2025-12135 Public exploit 7.2 HighNovember 21, 2025
iqonicdesign graphina – charts and graphs for elementor Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets CVE-2025-11820 6.4 MediumNovember 5, 2025
iqonicdesign graphina – charts and graphs for elementor Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-8867 6.4 MediumAugust 15, 2025
iqonicdesign wpbookit WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function CVE-2025-7852 9.8 CriticalJuly 24, 2025
iqonic wpbookit WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-6057 8.8 HighJuly 12, 2025
iqonic wpbookit WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload CVE-2025-6058 Public exploit 9.8 CriticalJuly 12, 2025
iqonic wpbookit WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update CVE-2025-3811 9.8 CriticalMay 9, 2025
iqonic wpbookit WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover CVE-2025-3810 9.8 CriticalMay 9, 2025
iqonicdesign streamit Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-2525 8.8 HighApril 8, 2025
iqonicdesign streamit Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Download CVE-2025-2519 6.5 MediumApril 8, 2025
iqonicdesign streamit Streamit <= 4.0.2 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover CVE-2025-2526 8.8 HighApril 8, 2025
iqonic wpbookit WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability CVE-2025-32254 5.3 MediumApril 4, 2025
iqonic wpbookit WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-26910 7.1 HighMarch 10, 2025
iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter CVE-2025-1572 6.5 MediumFebruary 28, 2025
iqonicdesign socialv - social network and community buddypress theme SocialV - Social Network and Community BuddyPress Theme <= 2.0.15 - Missing Authorization to Arbitrary File Download CVE-2024-13529 6.5 MediumFebruary 4, 2025
iqonic wpbookit WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload CVE-2025-0357 9.8 CriticalJanuary 25, 2025
iqonic wpbookit WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change CVE-2024-10215 9.8 CriticalJanuary 9, 2025
iqonic wpbookit WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability CVE-2024-54280 9.3 CriticalDecember 16, 2024
iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection CVE-2024-11729 6.5 MediumDecember 6, 2024
iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection CVE-2024-11730 6.5 MediumDecember 6, 2024
iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection CVE-2024-11728 Public exploit EPSS 13.6% 7.5 HighDecember 6, 2024
iqonicdesign graphina – charts and graphs for elementor Graphina – Elementor Charts and Graphs <= 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2024-4574 6.4 MediumMay 10, 2024
iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare < 2.3.9 - Unauthenticated SQLi CVE-2022-0786 EPSS 13.3% 9.8 CriticalJune 13, 2022