SQL Injection

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL InjectionCVE-2024-11728iqonicdesign · CVSS 7.5 · 14% likely

   CWE-89

2. WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerabilityCVE-2024-54280Iqonic Design · CVSS 9.3 · 0.6% likely

   CWE-89

3. KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL InjectionCVE-2024-11729iqonicdesign · CVSS 6.5 · 0.6% likely

   CWE-89

4. KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' ParameterCVE-2025-1572iqonicdesign · CVSS 6.5 · 0.5% likely

   CWE-89

5. KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilderCVE-2026-15072iqonicdesign · CVSS 6.5 · 0.5% likely

   CWE-89

6. KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL InjectionCVE-2024-11730iqonicdesign · CVSS 6.5 · 0.4% likely

   CWE-89

7. KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' ParameterCVE-2026-15453iqonicdesign · CVSS 6.5 · 0.4% likely

   CWE-89

8. KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionControllerCVE-2026-15073iqonicdesign · CVSS 6.5 · 0.4% likely

   CWE-89

9. WordPress WP Roadmap plugin <= 2.1.3 - SQL Injection vulnerabilityCVE-2025-52822Iqonic Design · CVSS 8.5 · 0.3% likely

   CWE-89

10. WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerabilityCVE-2025-66095Iqonic Design · CVSS 8.5 · 0.3% likely

    CWE-89

11. WordPress KiviCare plugin <= 3.6.16 - SQL Injection vulnerabilityCVE-2026-25022Iqonic Design · CVSS 8.5 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.