PatchTheCVEkivicare vulnerabilities and fixes
Recent CVEs affecting kivicare, with upgrade or downgrade steps. 5 tracked.
kivicare has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-02-28. Highest priority: CVE-2024-11728 (score 60/100).
- CVE-2025-1572 MEDIUM 6.5 UPGRADE The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi
- CVE-2024-35659 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploit
- CVE-2024-11730 MEDIUM 6.5 UPGRADE The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi
- CVE-2024-11729 MEDIUM 6.5 UPGRADE The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi
- CVE-2024-11728 HIGH 7.5 UPGRADE The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi
FAQ
How do I fix kivicare vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kivicare being exploited right now?
None of the tracked kivicare CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kivicare CVE should I patch first?
CVE-2024-11728 currently ranks highest (60/100): The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi.