CyberSecBulletin

KiviCare vulnerabilities

We track 2 vulnerabilities in KiviCare products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2026.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest KiviCare vulnerabilities

  • 7.5 High severity

    KiviCare: Improper Privilege Management

    CVE-2026-13610KiviCare

    The KiviCare WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated registration endpoint, allowing unauthenticated attackers to create an active, privileged clinic-staff (doctor) account with full access to patient re

  • 8.8 High severity

    KiviCare: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2026-13613KiviCare

    The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection.