Skip to content
OpenAdvisories

Vendor

Iqonic Design

48 known vulnerabilities.

Products

WPBookit 13 KiviCare – Clinic & Patient Management System (EHR) 11 KiviCare 7 Graphina – Charts and Graphs For Elementor 5 WPBookit Pro 3 Streamit 3 Graphina 3 WP Roadmap – Product Feedback Board 1 WP Roadmap 1 SocialV - Social Network and Community BuddyPress Theme 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.3
    CVE-2026-2991 Public exploit

    KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token

    The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2. This is due to the `patientSocialLogin()` function not verifying the social provider access token …

    Iqonic Design KiviCare – Clinic & Patient Management System (EHR) Web / CMS
  • High 7.2
    CVE-2025-12135 Public exploit

    WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting

    The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css_code' parameter in all versions up to, and including, 1.0.6 due to a missing capability check on the save_custome_code() function. This makes it possible for unauthent…

    Iqonic Design WPBookit Web / CMS
  • High 8.1
    CVE-2025-47533 Public exploit

    WordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Iqonic Design Graphina graphina-elementor-charts-and-graphs allows PHP Local File Inclusion.This issue affects Graphina: from n/a through <= 3.0.4.

    Iqonic Design Graphina
  • High 7.5
    CVE-2024-11728 Public exploit Scanner template EPSS 14%

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection

    The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'visit_type[service_id]' parameter of the tax_calculated_data AJAX action in all versions up to, and including, 3.6.4 due to insufficient escap…

    Iqonic Design KiviCare – Clinic & Patient Management System (EHR) Web / CMS