Skip to content
PluginCanary

KiviCare - Clinic & Patient Management System (EHR)

by Iqonic Design · 1,000+ active installs · Checked 3 Nov 2026
Healthy7 Warnings

Healthy: vulnerability published 28 Aug 2026, fixed in 4.5.5.

81/ 100 Canary Score
Sub-scores for KiviCare - Clinic & Patient Management System (EHR)
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 4.5.5. Update to version 4.5.5 or later.28 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 21 Aug 2026, fixed in 4.5.4. Update to version 4.5.4 or later.21 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 21 Aug 2026, fixed in 4.5.4. Update to version 4.5.4 or later.21 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 4.5.2. Update to version 4.5.2 or later.14 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 4.5.2. Update to version 4.5.2 or later.14 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 4.5.2. Update to version 4.5.2 or later.13 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 10 Aug 2026, fixed in 4.5.2. Update to version 4.5.2 or later.10 Aug 2026Evidence
  • InfoSEC-323 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master16 Oct 2020 to 16 Oct 2020, 1 commits
iqonicdesign22 Oct 2020 to 15 Oct 2026, 335 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
20 days ago
Releases, 24 months
32
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter for KiviCare - Clinic & Patient Management System (EHR)
Q1 20243
Q2 20240
Q3 20241
Q4 20243
Q1 20254
Q2 20252
Q3 20251
Q4 20250
Q1 202613
Q2 20262
Q3 20267
Q4 20260

Last release 15 Oct 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
28 Aug 2026KiviCare – Clinic & Patient Management System (EHR) <= 4.5.4 - Unauthenticated Information Exposure5.3<= 4.5.44.5.50
21 Aug 2026KiviCare – Clinic & Patient Management System (EHR) < 4.5.4 - Missing Authorization4.3< 4.5.44.5.40
21 Aug 2026KiviCare – Clinic & Patient Management System (EHR) < 4.5.4 - Missing Authorization4.3< 4.5.44.5.40
14 Aug 2026KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameter6.5<= 4.5.14.5.20
14 Aug 2026KiviCare – Clinic & Patient Management System (EHR) < 4.5.2 - Unauthenticated Privilege Escalation9.8< 4.5.24.5.20
13 Aug 2026KiviCare – Clinic & Patient Management System (EHR) < 4.5.2 - Authenticated (Custom role+) Information Exposure4.3< 4.5.24.5.20
10 Aug 2026KiviCare <= 4.5.1 - Authenticated (Authenticated+) SQL Injection6.5<= 4.5.14.5.20
10 Jul 2026KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilder6.5<= 4.5.04.5.10
10 Jul 2026KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionController6.5<= 4.5.04.5.10
9 Jul 2026KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST Endpoint5.3<= 4.4.04.5.00
26 May 2026KiviCare – Clinic & Patient Management System (EHR) <= 4.3.0 - Missing Authorization5.3<= 4.3.04.4.00
23 Apr 2026KiviCare – Clinic & Patient Management System (EHR) <= 4.2.1 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 4.2.14.3.00
23 Mar 2026KiviCare – Clinic & Patient Management System (EHR) <= 3.6.16 - Reflected Cross-Site Scripting6.1<= 3.6.164.0.00
23 Mar 2026KiviCare – Clinic & Patient Management System (EHR) <= 3.6.16 - Missing Authorization5.3<= 3.6.164.0.00
17 Mar 2026KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token7.3<= 4.1.24.1.30
17 Mar 2026KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard8.2<= 4.1.24.1.30
1 Feb 2026KiviCare <= 3.6.16 - Authenticated (Receptionist+) SQL Injection6.5<= 3.6.164.0.00
22 Jan 2026KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload5.3<= 3.6.153.6.165
27 Nov 2025KiviCare <= 3.6.13 - Authenticated (Patient+) SQL Injection6.5<= 3.6.133.6.14n/a
27 Feb 2025KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter6.5<= 3.6.73.6.825
5 Dec 2024KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection6.5<= 3.6.43.6.514
5 Dec 2024KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection7.5<= 3.6.43.6.514
5 Dec 2024KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection6.5<= 3.6.43.6.514
3 Jun 2024KiviCare <= 3.6.6 - Authenticated (Patient+) Insecure Direct Object Reference4.3<= 3.6.63.6.7267
5 Jun 2023KiviCare – Clinic & Patient Management System (EHR) <= 3.2.0 - Sensitive Information Exposure6.53.2.03.2.115

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.6 from 23 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star14
4 star0
3 star1
2 star2
1 star6

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for KiviCare - Clinic & Patient Management System (EHR)
4 May 2026825
11 May 2026365
18 May 2026394
25 May 2026494
1 Jun 2026286
8 Jun 2026241
15 Jun 2026223
22 Jun 2026177
29 Jun 2026206
6 Jul 20261,726
13 Jul 2026637
20 Jul 2026289
27 Jul 2026276
3 Aug 2026934
10 Aug 20261,300
17 Aug 20261,004
24 Aug 2026506
31 Aug 2026696
7 Sep 2026350
14 Sep 2026403
21 Sep 2026282
28 Sep 2026949
5 Oct 2026431
12 Oct 2026429
19 Oct 2026616
26 Oct 2026457
2 Nov 202654

Weekly downloads over the last 4 weeks are 28% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version4.5.6
AuthorIqonic Design
Added22 Oct 2020
Last updated15 Oct 2026
Active installs1,000+
Requires WordPress3.0.1
Tested up to7.1.4
Requires PHP8.0
CategoryE-commerce & Shopping
Tagsclinic management, doctor management, patient management, appointment management, clinic management solution

Other plugins by this author: Graphina - Charts and Graphs For Elementor, Marvy - Background Animations for Elementor, WP Roadmap - Product Feedback Board, WPMultiHost - 1 WordPress Site with Multiple Domains, WPBookit

Questions

Is KiviCare - Clinic & Patient Management System (EHR) still maintained?

KiviCare - Clinic & Patient Management System (EHR) was last updated on 15 Oct 2026. Its Canary status is Healthy.

Is KiviCare - Clinic & Patient Management System (EHR) safe?

KiviCare - Clinic & Patient Management System (EHR) has no open unpatched vulnerabilities on record. 23 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns KiviCare - Clinic & Patient Management System (EHR)?

The wordpress.org author is Iqonic Design. Recent committers: iqonicdesign, plugin-master. We have recorded no ownership change.

What can I use instead of KiviCare - Clinic & Patient Management System (EHR)?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue