目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

Iqonic Design 厂商漏洞列表 / CVE 中文分析 15

Iqonic Design 厂商相关 15 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Iqonic Design 是一家提供 UI 组件库和设计系统的厂商，主要服务于移动应用和 Web 开发者。历史漏洞记录显示其产品曾存在远程代码执行、跨站脚本和权限绕过等安全问题，尤其在组件集成过程中较为常见。截至最新统计，该厂商相关产品已报告 15 个 CVE 漏洞，主要集中在输入验证不足和会话管理缺陷。安全建议开发者及时更新组件版本并对用户输入进行严格过滤。

上位製品 Iqonic Design: KiviCare WPBookit Graphina WP Roadmap – Product Feedback Board WP Roadmap
CVE IDタイトルCVSS深刻度公開日
CVE-2026-25383 WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability — KiviCareCWE-79 7.1 High2026-03-25
CVE-2026-25034 WordPress KiviCare plugin <= 3.6.16 - Broken Access Control vulnerability — KiviCareCWE-862 6.5 Medium2026-03-25
CVE-2026-25022 WordPress KiviCare plugin <= 3.6.16 - SQL Injection vulnerability — KiviCareCWE-89 8.5 High2026-02-03
CVE-2025-66095 WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerability — KiviCareCWE-89 8.5 High2025-11-21
CVE-2025-52822 WordPress WP Roadmap plugin <= 2.1.3 - SQL Injection vulnerability — WP RoadmapCWE-89 8.5 High2025-06-20
CVE-2025-47533 WordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability — GraphinaCWE-352 8.1 High2025-05-07
CVE-2025-47480 WordPress Graphina plugin <= 3.0.4 - Broken Access Control Vulnerability — GraphinaCWE-862 5.4 Medium2025-05-07
CVE-2025-32254 WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability — WPBookitCWE-862 5.3 Medium2025-04-04
CVE-2025-26910 WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability — WPBookitCWE-352 7.1 High2025-03-10
CVE-2025-0357 WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload — WPBookitCWE-434 9.8 Critical2025-01-25
CVE-2024-10215 WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change — WPBookitCWE-639 9.8 Critical2025-01-09
CVE-2024-54280 WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability — WPBookitCWE-89 9.3 Critical2024-12-16
CVE-2024-43124 WordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability — GraphinaCWE-79 6.5 Medium2024-08-12
CVE-2024-35659 WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability — KiviCareCWE-862 5.3 Medium2024-06-08
CVE-2023-41128 WordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) — WP Roadmap – Product Feedback BoardCWE-79 5.9 Medium2023-11-30

本页汇总了 Iqonic Design 厂商截至目前公开的全部 15 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。