Skip to content
OpenAdvisories
High · 8.2 CVE-2026-42735 EUVD-2026-32187GHSA-ww95-xww8-jvm2

WordPress KiviCare plugin <= 4.3.0 - Broken Authentication vulnerability

Published May 27, 2026 · Updated May 27, 2026 · Assigned by Patchstack

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.

Affected products

VendorProductAffectedFixed
Iqonic Design KiviCare ≤ 4.3.0 —

References