CVEs we hold for Iqonicdesign
Records whose assigning authority named Iqonicdesign as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-2992KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizardiqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2026-2991KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login…iqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2026-25415WordPress WPBookit Pro plugin <= 1.6.18 - Broken Access Control vulnerabilityiqonicdesign WPBookit Pro
CVE-2026-25414WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Escalation vulnerabilityiqonicdesign WPBookit Pro
CVE-2026-25413WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerabilityiqonicdesign WPBookit Pro
CVE-2026-1980WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposureiqonicdesign WPBookit
CVE-2026-1945WPBookit <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting via 'wpb_user_name' and 'wpb_user_email' Parametersiqonicdesign WPBookit
CVE-2026-15453KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameteriqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2026-15073KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionControlleriqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2026-15072KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilderiqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2026-13709Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget…iqonicdesign Graphina – Charts and Graphs For Elementor
CVE-2026-11990KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via…iqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2026-0927KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited…iqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2025-8867Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingiqonicdesign Graphina – Charts and Graphs For Elementor
CVE-2025-7852WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Functioniqonicdesign WPBookit
CVE-2025-6057WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Uploadiqonicdesign WPBookit
CVE-2025-3811WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Updateiqonicdesign WPBookit
CVE-2025-3810WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeoveriqonicdesign WPBookit
CVE-2025-2526Streamit <= 4.0.2 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeoveriqonicdesign Streamit
CVE-2025-2525Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Uploadiqonicdesign Streamit
CVE-2025-2519Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Downloadiqonicdesign Streamit
CVE-2025-1572KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id'…iqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2025-11820Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart…iqonicdesign Graphina – Charts and Graphs For Elementor
CVE-2024-4574Graphina – Elementor Charts and Graphs <= 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple…iqonicdesign Graphina – Charts and Graphs For Elementor
CVE-2024-13529SocialV - Social Network and Community BuddyPress Theme <= 2.0.15 - Missing Authorization to Arbitrary File Downloadiqonicdesign SocialV - Social Network and Community…
CVE-2024-11730KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injectioniqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2024-11729KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injectioniqonicdesign KiviCare – Clinic & Patient Management System…
CVE-2024-11728KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injectioniqonicdesign KiviCare – Clinic & Patient Management System…
30 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.