KiviCare vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

KI

Product

KiviCare

by Iqonic Design · last CVE Jun 15, 2026

7

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 5Medium 2Low 0

Severity

All severities7 Critical0 High5 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add KiviCare to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-35659	8.8	0%	Jun 8	WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.6.6
CVE-2026-25022	8.5	0%	Feb 3	WordPress KiviCare plugin <= 3.6.16 - SQL Injection vulnerability Affected: through 3.6.16
CVE-2025-66095	8.5	0%	Nov 21	WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerability Affected: through 3.6.13
CVE-2026-42735	8.2	0%	May 27	WordPress KiviCare plugin <= 4.3.0 - Broken Authentication vulnerability Affected: through 4.3.0
CVE-2026-25383	7.1	0%	Mar 25	WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 3.6.16
CVE-2026-25034	6.5	0%	Mar 25	WordPress KiviCare plugin <= 3.6.16 - Broken Access Control vulnerability Affected: through 3.6.16
CVE-2026-40792	6.3	0%	Jun 15	WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability Affected: through 4.2.1