Browse all 15 CVE security advisories affecting Iqonic Design. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Iqonic Design develops WordPress themes and plugins for website creation, with 15 CVEs recorded, primarily involving stored cross-site scripting (XSS) and remote code execution (RCE) vulnerabilities. Historically, their products have frequently contained insufficient input validation and improper sanitization, allowing attackers to execute arbitrary code or inject malicious content. Notable security characteristics include inconsistent patching timelines and recurring similar flaws across multiple products. While no major public incidents have been widely documented, the pattern of vulnerabilities suggests ongoing challenges in secure coding practices, particularly in handling user-supplied data and implementing proper access controls.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-32254 | WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability — WPBookitCWE-862 | 5.3 | Medium | 2025-04-04 |
| CVE-2025-26910 | WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability — WPBookitCWE-352 | 7.1 | High | 2025-03-10 |
| CVE-2025-0357 | WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload — WPBookitCWE-434 | 9.8 | Critical | 2025-01-25 |
| CVE-2024-10215 | WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change — WPBookitCWE-639 | 9.8 | Critical | 2025-01-09 |
| CVE-2024-54280 | WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability — WPBookitCWE-89 | 9.3 | Critical | 2024-12-16 |
This page lists every published CVE security advisory associated with Iqonic Design. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.