Skip to content
Noroxi

iqonic records

20 published records for vendor iqonic.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
20%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2022-0786
    43Plan

    KiviCare < 2.3.9 - Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    iqonic · kivicareJun 13, 2022

  • CVE-2025-6058
    41Plan

    WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 6%

    iqonic · wpbookitJul 12, 2025

  • CVE-2025-0357
    39Monitor

    WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 1%

    iqonic · wpbookitJan 24, 2025

  • CVE-2025-3810
    39Monitor

    WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover

    CriticalCVSS 9.8No exploitEPSS 0%

    iqonic · wpbookitMay 8, 2025

  • CVE-2025-3811
    39Monitor

    WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update

    CriticalCVSS 9.8No exploitEPSS 0%

    iqonic · wpbookitMay 8, 2025

  • CVE-2024-10215
    39Monitor

    WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change

    CriticalCVSS 9.8No exploitEPSS 0%

    iqonic · wpbookitJan 9, 2025

  • CVE-2024-54280
    39Monitor

    WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    iqonic · wpbookitDec 16, 2024

  • CVE-2025-6057
    35Monitor

    WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 0%

    iqonic · wpbookitJul 12, 2025

  • CVE-2025-1572
    35Monitor

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter

    HighCVSS 8.8No exploitEPSS 0%

    iqonic · kivicareFeb 28, 2025

  • CVE-2023-2628
    35Monitor

    KiviCare Management System < 3.2.1 - Multiple CSRF

    HighCVSS 8.8No exploitEPSS 0%

    iqonic · kivicareJun 27, 2023

  • CVE-2024-35659
    35Monitor

    WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    iqonic · kivicareJun 8, 2024

  • CVE-2024-11728
    34Monitor

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 13%

    iqonic · kivicareDec 6, 2024

  • CVE-2023-2623
    26Monitor

    KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    iqonic · kivicareJun 27, 2023

  • CVE-2024-11729
    26Monitor

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection

    MediumCVSS 6.5No exploitEPSS 0%

    iqonic · kivicareDec 6, 2024

  • CVE-2024-11730
    26Monitor

    KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection

    MediumCVSS 6.5No exploitEPSS 0%

    iqonic · kivicareDec 6, 2024

  • CVE-2023-2624
    24Monitor

    KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 1%

    iqonic · kivicareJun 27, 2023

  • CVE-2025-26910
    24Monitor

    WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    iqonic · wpbookitMar 10, 2025

  • CVE-2025-32254
    21Monitor

    WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    iqonic · wpbookitApr 4, 2025

  • CVE-2023-41128
    19Monitor

    WordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    iqonic · wp roadmapNov 30, 2023

  • CVE-2023-2627
    17Monitor

    KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls

    MediumCVSS 4.3No exploitEPSS 0%

    iqonic · kivicareJun 27, 2023