IQ
Vendor
Iqonic
20
CVEs
0
On KEV
0
New 30D
Products
KI9.8
Kivicare
Iqonic
10 CVEs0 on KEV0 new
WP9.8
Wpbookit
Iqonic
9 CVEs0 on KEV0 new
WR4.8
WP Roadmap
Iqonic
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-6057 | WP Wpbookit Iqonic | 8.8 | Jul 12 | WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2025-6058 | WP Wpbookit Iqonic | 9.8 | Jul 12 | WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload |
| CVE-2025-3811 | WP Wpbookit Iqonic | 9.8 | May 9 | WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update |
| CVE-2025-3810 | WP Wpbookit Iqonic | 9.8 | May 9 | WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover |
| CVE-2025-32254 | WP Wpbookit Iqonic | 5.3 | Apr 4 | WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability |
| CVE-2025-26910 | WP Wpbookit Iqonic | 6.1 | Mar 10 | WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2025-1572 | KI Kivicare Iqonic | 8.8 | Feb 28 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter |
| CVE-2025-0357 | WP Wpbookit Iqonic | 9.8 | Jan 25 | WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload |
| CVE-2024-10215 | WP Wpbookit Iqonic | 9.8 | Jan 9 | WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change |
| CVE-2024-54280 | WP Wpbookit Iqonic | 9.8 | Dec 16 | WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability |
| CVE-2024-11729 | KI Kivicare Iqonic | 6.5 | Dec 6 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection |
| CVE-2024-11730 | KI Kivicare Iqonic | 6.5 | Dec 6 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection |
| CVE-2024-11728 | KI Kivicare Iqonic | 7.5 | Dec 6 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection |
| CVE-2024-35659 | KI Kivicare Iqonic | 8.8 | Jun 8 | WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2023-41128 | WR WP Roadmap Iqonic | 4.8 | Nov 30 | WordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-2624 | KI Kivicare Iqonic | 6.1 | Jun 27 | KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting |
| CVE-2023-2628 | KI Kivicare Iqonic | 8.8 | Jun 27 | KiviCare Management System < 3.2.1 - Multiple CSRF |
| CVE-2023-2623 | KI Kivicare Iqonic | 6.5 | Jun 27 | KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure |
| CVE-2023-2627 | KI Kivicare Iqonic | 4.3 | Jun 27 | KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls |
| CVE-2022-0786 | KI Kivicare Iqonic | 9.8 | Jun 13 | The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the… |