Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

iqonicdesign vulnerabilities

31 published CVEs name iqonicdesign among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-110291

    Graphina <= 3.1.13 - Unauthenticated Stored Cross-Site Scripting via Tree Chart Widget Settings

    iqonicdesign · Graphina – Charts and Graphs For Elementor

    High7.2
  • CVE-2026-13709

    Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting

    iqonicdesign · Graphina – Charts and Graphs For Elementor

    Medium6.4
  • CVE-2026-15453

    KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameter

    iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

    Medium6.5
  • CVE-2026-15072

    KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilder

    iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

    Medium6.5
  • CVE-2026-15073

    KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionController

    iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

    Medium6.5
  • CVE-2026-11990

    KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST Endpoint

    iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

    Medium5.3
  • CVE-2026-25414

    WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Escalation vulnerability

    iqonicdesign · WPBookit Pro

    High8.8
  • CVE-2026-25413

    WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerability

    iqonicdesign · WPBookit Pro

    Critical9.9
  • CVE-2026-2992

    KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard

    iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

    High8.2
  • CVE-2026-2991

    KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token

    iqonicdesign · KiviCare – Clinic & Patient Management System (EHR)

    High7.3
All 31 in the list