Iqonic Design — Vulnerabilities & Security Advisories 18

Iqonic Design develops WordPress themes and plugins for website creation, with 15 CVEs recorded, primarily involving stored cross-site scripting (XSS) and remote code execution (RCE) vulnerabilities. Historically, their products have frequently contained insufficient input validation and improper sanitization, allowing attackers to execute arbitrary code or inject malicious content. Notable security characteristics include inconsistent patching timelines and recurring similar flaws across multiple products. While no major public incidents have been widely documented, the pattern of vulnerabilities suggests ongoing challenges in secure coding practices, particularly in handling user-supplied data and implementing proper access controls.