Skip to content
OpenAdvisories

Vendor

Iqonic Design

48 known vulnerabilities.

Products

WPBookit 13 KiviCare – Clinic & Patient Management System (EHR) 11 KiviCare 7 Graphina – Charts and Graphs For Elementor 5 WPBookit Pro 3 Streamit 3 Graphina 3 WP Roadmap – Product Feedback Board 1 WP Roadmap 1 SocialV - Social Network and Community BuddyPress Theme 1
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • Critical 9.3
    CVE-2024-54280

    WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design WPBookit wpbookit allows SQL Injection.This issue affects WPBookit: from n/a through <= 1.6.0.

    Iqonic Design WPBookit
  • Medium 6.5
    CVE-2024-11729

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection

    The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'service_list[0][service_id]' parameter of the get_widget_payment_options AJAX action in all versions up to, and including, 3.6.4 due to insuff…

    Iqonic Design KiviCare – Clinic & Patient Management System (EHR) Web / CMS
  • Medium 6.5
    CVE-2024-11730

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection

    The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'sort[]' parameter of the static_data_list AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user sup…

    Iqonic Design KiviCare – Clinic & Patient Management System (EHR) Web / CMS
  • High 7.5
    CVE-2024-11728 Public exploit Scanner template EPSS 14%

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection

    The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'visit_type[service_id]' parameter of the tax_calculated_data AJAX action in all versions up to, and including, 3.6.4 due to insufficient escap…

    Iqonic Design KiviCare – Clinic & Patient Management System (EHR) Web / CMS
  • Medium 6.5
    CVE-2024-43124

    WordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Iqonic Design Graphina allows Stored XSS.This issue affects Graphina: from n/a through 1.8.10.

    Iqonic Design Graphina
  • Medium 5.3
    CVE-2024-35659

    WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability

    Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KiviCare: from n/a through <= 3.6.6.

    Iqonic Design KiviCare
  • Medium 6.4
    CVE-2024-4574

    Graphina – Elementor Charts and Graphs <= 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.8.9 due to insufficient input sanitization and output escaping on user supplied attribute…

    Iqonic Design Graphina – Charts and Graphs For Elementor Web / CMS
  • Medium 5.9
    CVE-2023-41128

    WordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design WP Roadmap – Product Feedback Board allows Stored XSS.This issue affects WP Roadmap – Product Feedback Board: from n/a through 1.0.8.

    Iqonic Design WP Roadmap – Product Feedback Board