Iqonic Design — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting Iqonic Design. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Iqonic Design develops WordPress themes and plugins for website creation, with 15 CVEs recorded, primarily involving stored cross-site scripting (XSS) and remote code execution (RCE) vulnerabilities. Historically, their products have frequently contained insufficient input validation and improper sanitization, allowing attackers to execute arbitrary code or inject malicious content. Notable security characteristics include inconsistent patching timelines and recurring similar flaws across multiple products. While no major public incidents have been widely documented, the pattern of vulnerabilities suggests ongoing challenges in secure coding practices, particularly in handling user-supplied data and implementing proper access controls.

Top products by Iqonic Design: KiviCare WPBookit Graphina WP Roadmap – Product Feedback Board WP Roadmap

CVEs 18

CVE ID	Title	CVSS	Severity	Published
CVE-2026-65529	WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability — Graphina CWE-862	5.3	Medium	2026-07-23
CVE-2026-40792	WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability — KiviCare CWE-639	6.3	Medium	2026-06-15
CVE-2026-42735	WordPress KiviCare plugin <= 4.3.0 - Broken Authentication vulnerability — KiviCare CWE-288	8.2	High	2026-05-27
CVE-2026-25383	WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability — KiviCare CWE-79	7.1	High	2026-03-25
CVE-2026-25034	WordPress KiviCare plugin <= 3.6.16 - Broken Access Control vulnerability — KiviCare CWE-862	6.5	Medium	2026-03-25
CVE-2026-25022	WordPress KiviCare plugin <= 3.6.16 - SQL Injection vulnerability — KiviCare CWE-89	8.5	High	2026-02-03
CVE-2025-66095	WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerability — KiviCare CWE-89	8.5	High	2025-11-21
CVE-2025-52822	WordPress WP Roadmap plugin <= 2.1.3 - SQL Injection vulnerability — WP Roadmap CWE-89	8.5	High	2025-06-20
CVE-2025-47533	WordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability — Graphina CWE-352	8.1	High	2025-05-07
CVE-2025-47480	WordPress Graphina plugin <= 3.0.4 - Broken Access Control Vulnerability — Graphina CWE-862	5.4	Medium	2025-05-07
CVE-2025-32254	WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability — WPBookit CWE-862	5.3	Medium	2025-04-04
CVE-2025-26910	WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability — WPBookit CWE-352	7.1	High	2025-03-10
CVE-2025-0357	WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload — WPBookit CWE-434	9.8	Critical	2025-01-25
CVE-2024-10215	WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change — WPBookit CWE-639	9.8	Critical	2025-01-09
CVE-2024-54280	WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability — WPBookit CWE-89	9.3	Critical	2024-12-16
CVE-2024-43124	WordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability — Graphina CWE-79	6.5	Medium	2024-08-12
CVE-2024-35659	WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability — KiviCare CWE-862	5.3	Medium	2024-06-08
CVE-2023-41128	WordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) — WP Roadmap – Product Feedback Board CWE-79	5.9	Medium	2023-11-30

This page lists every published CVE security advisory associated with Iqonic Design. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.