iqonicdesign vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 202513
3. 202613

Newest CVEs

• CVE-2026-13709

  Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting

  iqonicdesign · Graphina – Charts and Graphs For Elementor

  Medium6.4
• CVE-2026-15453

  KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameter

  iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

  Medium6.5
• CVE-2026-15072

  KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilder

  iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

  Medium6.5
• CVE-2026-15073

  KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionController

  iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

  Medium6.5
• CVE-2026-11990

  KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST Endpoint

  iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

  Medium5.3
• CVE-2026-25414

  WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Escalation vulnerability

  iqonicdesign · WPBookit Pro

  High8.8
• CVE-2026-25413

  WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerability

  iqonicdesign · WPBookit Pro

  Critical9.9
• CVE-2026-2992

  KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard

  iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

  High8.2
• CVE-2026-2991

  KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token

  iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

  High7.3
• CVE-2026-1980

  WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure

  iqonicdesign · WPBookit

  Medium5.3