Pricing
Case studies
Login
Start trial
KiviCare
Iqonic Design
Developer
3.6.14
Latest version
2,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
11 fixed
5 Mitigation rules
SQL Injection vulnerability
<= 3.6.13
Nov 27, 2025
Authenticated (Doctor+) SQL Injection via 'u_id' Parameter vulnerability
<= 3.6.7
Feb 27, 2025
Authenticated (Doctor/Receptionist+) SQL Injection vulnerability
<= 3.6.4
Dec 6, 2024
Authenticated (Subscriber+) SQL Injection vulnerability
<= 3.6.4
Dec 6, 2024
Unauthenticated SQL Injection vulnerability
<= 3.6.4
Dec 6, 2024
Insecure Direct Object References (IDOR) vulnerability
<= 3.6.6
Jun 3, 2024
Reflected Cross-Site Scripting vulnerability
< 3.2.1
Jun 22, 2023
Subscriber+ Sensitive Information Disclosure vulnerability
< 3.2.1
Jun 22, 2023
Subscriber+ Unauthorised AJAX Calls vulnerability
< 3.2.1
Jun 22, 2023
Multiple CSRF vulnerability
< 3.2.1
Jun 22, 2023
Unauthenticated SQL Injection (SQLi) vulnerability
<= 2.3.8
May 23, 2022