WordPress plugin
KiviCare – Clinic & Patient Management System (EHR) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 29 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High3
- Medium24
- Low0
All KiviCare – Clinic & Patient Management System (EHR) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Privilege Escalation <4.5.2Update to 4.5.2 | CVE-2026-13610 | |
| High8.2 | Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard ≤4.1.2Update to 4.1.3 | CVE-2026-2992 | |
| High7.3 | Unauthenticated Authentication Bypass via Social Login Token ≤4.1.2Update to 4.1.3 | CVE-2026-2991 | |
| High7.5 | Unauthenticated SQL Injection ≤3.6.4Update to 3.6.5 | CVE-2024-11728 | |
| Critical9.8 | SQL Injection ≤2.3.8Update to 2.3.9 | CVE-2022-0786 |
- Critical9.8Unauthenticated Privilege Escalation
<4.5.2Update to 4.5.2
- High8.2Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard
≤4.1.2Update to 4.1.3
- High7.3Unauthenticated Authentication Bypass via Social Login Token
≤4.1.2Update to 4.1.3
- High7.5Unauthenticated SQL Injection
≤3.6.4Update to 3.6.5
- Critical9.8SQL Injection
≤2.3.8Update to 2.3.9
KiviCare – Clinic & Patient Management System (EHR): common questions
Does KiviCare – Clinic & Patient Management System (EHR) have known vulnerabilities?
Yes. VulnCrest Radar lists 29 known vulnerabilities in KiviCare – Clinic & Patient Management System (EHR): 2 critical, 3 high, 24 medium. None are known to affect version null.
How do I check which version of KiviCare – Clinic & Patient Management System (EHR) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent KiviCare – Clinic & Patient Management System (EHR) vulnerability?
CVE-2026-13611, published Aug 28, 2026: KiviCare – Clinic & Patient Management System (EHR) <= 4.5.4 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any KiviCare – Clinic & Patient Management System (EHR) vulnerability listed in CISA KEV?
No. None of the known KiviCare – Clinic & Patient Management System (EHR) vulnerabilities is currently listed in the CISA KEV catalog.