Log in Start free

Iqonic Design

Products

ProductCVEsExploitedLatest
KiviCare7–Jun 15, 2026
WPBookit5–Apr 4, 2025
Graphina3–May 7, 2025
WP Roadmap1–Jun 20, 2025
WP Roadmap – Product Feedback Board1–Nov 30, 2023

Exploited and recent CVEs

  • CVE-2026-40792 Medium 6.3 WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-42735 High 8.2 WordPress KiviCare plugin <= 4.3.0 - Broken Authentication vulnerability 0.3%
  • CVE-2026-25383 High 7.1 WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-25034 Medium 6.5 WordPress KiviCare plugin <= 3.6.16 - Broken Access Control vulnerability 0.2%
  • CVE-2026-25022 High 8.5 WordPress KiviCare plugin <= 3.6.16 - SQL Injection vulnerability 0.2%
  • CVE-2025-66095 High 8.5 WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerability 0.3%
  • CVE-2025-52822 High 8.5 WordPress WP Roadmap plugin <= 2.1.3 - SQL Injection vulnerability 0.3%
  • CVE-2025-47533 High 8.1 WordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability 0.4%
  • CVE-2025-47480 Medium 5.4 WordPress Graphina plugin <= 3.0.4 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-32254 Medium 5.3 WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability 0.5%
  • CVE-2025-26910 High 7.1 WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-0357 Critical 9.8 WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload 1.1%
  • CVE-2024-10215 Critical 9.8 WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change 0.7%
  • CVE-2024-54280 Critical 9.3 WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability 0.6%
  • CVE-2024-43124 Medium 6.5 WordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-35659 Medium 5.3 WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2023-41128 Medium 5.9 WordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) 0.4%