PatchTheCVEiqonic vulnerabilities
Recent CVEs affecting iqonic products. 13 tracked.
iqonic has 13 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-07-12. Highest priority: CVE-2025-6058 (score 66/100).
- CVE-2025-6058 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation
- CVE-2025-6057 HIGH 8.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation
- CVE-2025-3811 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions u
- CVE-2025-3810 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions u
- CVE-2025-32254 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Iqonic Design WPBookit wpbookit allows Accessing Functionality Not Prop
- CVE-2025-26910 HIGH 7.1 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Iqonic Design WPBookit wpbookit allows Stored XSS.This issu
- CVE-2025-1572 MEDIUM 6.5 UPGRADE The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi
- CVE-2025-0357 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type valida
- CVE-2024-54280 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic D
- CVE-2024-11730 MEDIUM 6.5 UPGRADE The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi
- CVE-2024-11729 MEDIUM 6.5 UPGRADE The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi
- CVE-2024-11728 HIGH 7.5 UPGRADE The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection vi
- CVE-2024-10215 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and inclu
FAQ
How do I fix iqonic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iqonic being exploited right now?
None of the tracked iqonic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iqonic CVE should I patch first?
CVE-2025-6058 currently ranks highest (66/100): The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation .