IQ
Vendor
iqonicdesign
29
CVEs
0
On KEV
0
New 30D
Products
KC8.8
KiviCare – Clinic & Patient Management System (EHR)
iqonicdesign
11 CVEs0 on KEV0 new
WP9.8
WPBookit
iqonicdesign
8 CVEs0 on KEV0 new
GC6.4
Graphina – Charts and Graphs For Elementor
iqonicdesign
3 CVEs0 on KEV0 new
ST8.8
Streamit
iqonicdesign
3 CVEs0 on KEV0 new
WP9.9
WPBookit Pro
iqonicdesign
3 CVEs0 on KEV0 new
SS6.5
SocialV - Social Network and Community BuddyPress Theme
iqonicdesign
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13709 | GC Graphina – Charts and Graphs For Elementor iqonicdesign | 6.4 | Sep 9 | Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting |
| CVE-2026-15453 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 6.5 | Aug 15 | KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameter |
| CVE-2026-15072 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 6.5 | Jul 11 | KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilder |
| CVE-2026-15073 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 6.5 | Jul 11 | KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionController |
| CVE-2026-11990 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 5.3 | Jul 10 | KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST Endpoint |
| CVE-2026-25414 | WP WPBookit Pro iqonicdesign | 8.8 | Mar 25 | WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Escalation vulnerability |
| CVE-2026-25413 | WP WPBookit Pro iqonicdesign | 9.9 | Mar 25 | WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerability |
| CVE-2026-2992 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 8.2 | Mar 18 | KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard |
| CVE-2026-2991 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 7.3 | Mar 18 | KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token |
| CVE-2026-1980 | WP WPBookit iqonicdesign | 5.3 | Mar 4 | WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure |
| CVE-2026-1945 | WP WPBookit iqonicdesign | 7.2 | Mar 4 | WPBookit <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting via 'wpb_user_name' and 'wpb_user_email' Parameters |
| CVE-2026-25415 | WP WPBookit Pro iqonicdesign | 5.3 | Feb 19 | WordPress WPBookit Pro plugin <= 1.6.18 - Broken Access Control vulnerability |
| CVE-2026-0927 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 5.3 | Jan 23 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload |
| CVE-2025-12135 | WP WPBookit iqonicdesign | 7.2 | Nov 21 | WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2025-11820 | GC Graphina – Charts and Graphs For Elementor iqonicdesign | 6.4 | Nov 5 | Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets |
| CVE-2025-8867 | GC Graphina – Charts and Graphs For Elementor iqonicdesign | 6.4 | Aug 15 | Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-7852 | WP WPBookit iqonicdesign | 9.8 | Jul 24 | WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function |
| CVE-2025-6057 | WP WPBookit iqonicdesign | 8.8 | Jul 12 | WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2025-6058 | WP WPBookit iqonicdesign | 9.8 | Jul 12 | WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload |
| CVE-2025-3811 | WP WPBookit iqonicdesign | 9.8 | May 9 | WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update |
| CVE-2025-3810 | WP WPBookit iqonicdesign | 9.8 | May 9 | WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover |
| CVE-2025-2519 | ST Streamit iqonicdesign | 6.5 | Apr 8 | Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Download |
| CVE-2025-2525 | ST Streamit iqonicdesign | 8.8 | Apr 8 | Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2025-2526 | ST Streamit iqonicdesign | 8.8 | Apr 8 | Streamit <= 4.0.2 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover |
| CVE-2025-1572 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 8.8 | Feb 28 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter |
| CVE-2024-13529 | SS SocialV - Social Network and Community BuddyPress Theme iqonicdesign | 6.5 | Feb 4 | SocialV - Social Network and Community BuddyPress Theme <= 2.0.15 - Missing Authorization to Arbitrary File Download |
| CVE-2024-11729 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 6.5 | Dec 6 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection |
| CVE-2024-11730 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 6.5 | Dec 6 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection |
| CVE-2024-11728 | KC KiviCare – Clinic & Patient Management System (EHR) iqonicdesign | 7.5 | Dec 6 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection |