KiviCare – Clinic & Patient Management System (EHR)

Vulnerabilities 18Slug kivicare-clinic-management-systemLatest version 4.4.0WordPress.org →

Minimum safe version

4.3.0

Update to 4.3.0 or later to address 18 fixable vulnerabilities

Latest available4.4.0 ✓
N/A
2026-04-23< 4.3.0

KiviCare – Clinic & Patient Management System (EHR) <= 4.2.1 - Authenticated (Subscriber+) Insecure Direct Object Reference

WordfenceCVE
N/A
2026-01-22< 3.6.16

KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload

WordfenceCVE
N/A
2026-03-17< 4.1.3

KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token

WordfenceCVE
N/A
2026-03-17< 4.1.3

KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard

WordfenceCVE
High 8.5
2025-11-27< 3.6.14

KiviCare <= 3.6.13 - Authenticated (Patient+) SQL Injection

WordfenceCVEEUVD
Medium 6.5
2025-02-28< 3.6.8

KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter

EUVDWordfenceCVE