[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdAhxnHarUj9oc7l900TjN_qYaesjMyOjGRDiVMREZow":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":233,"crawl_stats":38,"alternatives":238,"analysis":262,"fingerprints":908},"kivicare-clinic-management-system","KiviCare – Clinic & Patient Management System (EHR)","4.2.0","Iqonic Design","https:\u002F\u002Fprofiles.wordpress.org\u002Fiqonicdesign\u002F","\u003Cp>🚀 \u003Cstrong>Launch Your Complete Online Clinic in 60 Seconds!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>KiviCare is the most advanced, self-hosted clinic and patient management solution (EHR) built for WordPress. \u003Cstrong>Powered by React 19\u003C\u002Fstrong> and \u003Cstrong>Bootstrap 5\u003C\u002Fstrong>, KiviCare delivers a lightning-fast, modern interface that doesn’t feel like a typical WordPress plugin.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NEW in Version 4.0:\u003C\u002Fstrong> Complete UI\u002FUX Redesign!\u003Cbr \u002F>\nAfter 3+ years of development and refinement, KiviCare now features a completely redesigned modern interface with improved performance, cleaner design, and enhanced user experience. It’s the only Medical EHR solution on WordPress that provides a \u003Cstrong>pure MAGICAL EXPERIENCE\u003C\u002Fstrong> comparable to modern SaaS applications.\u003C\u002Fp>\n\u003Ch3>\u003Ca href=\"https:\u002F\u002Fdemo.kivicare.io\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-demo\" rel=\"nofollow ugc\">DEMO\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fdoctor-patient-clinic-appointment-plugin-wordpress\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-pro\" rel=\"nofollow ugc\">PRO\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fclinic-management-wordpress-theme-and-plugin\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-theme\" rel=\"nofollow ugc\">WP Theme\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fzoom-and-google-meet-telemedicine-addons\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-telemed\" rel=\"nofollow ugc\">Zoom Telemed\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fzoom-and-google-meet-telemedicine-addons\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-telemed\" rel=\"nofollow ugc\">Google Meet Telemed\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fehr-management-flutter-mobile-app\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-app\" rel=\"nofollow ugc\">Mobile App\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdocumentation.iqonic.design\u002Fkivicare-wordpress?utm_source=wordpressorg&utm_medium=wordpressorg-docs\" rel=\"nofollow ugc\">Docs\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>A WordPress plugin that doesn’t feel like one.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>What’s New in Version 4.0 (The Big Redesign!)\u003C\u002Fh3>\n\u003Ch3>\u003Cstrong>Modern Interface & Performance\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Completely Redesigned UI\u003C\u002Fstrong> – Built with React 19 + Bootstrap 5 for a premium, modern look\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightning-Fast Performance\u003C\u002Fstrong> – Lazy loading components and optimized rendering\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smoother Navigation\u003C\u002Fstrong> – Cleaner design with improved user experience\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Language Switcher\u003C\u002Fstrong> – Easily change preferred language from the header\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Enhanced Scheduling\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Day-Wise Time Slots\u003C\u002Fstrong> – Set unique availability for each day of the week\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible Doctor Scheduling\u003C\u002Fstrong> – Different time slots for different days\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Better Appointment Management\u003C\u002Fstrong> – Streamlined booking flow\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Payment Flexibility\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>NEW: KnitPay Integration\u003C\u002Fstrong> – Support for 500+ payment gateways worldwide\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PayPal Integration\u003C\u002Fstrong> – Accept online payments seamlessly\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce Compatible\u003C\u002Fstrong> – Full e-commerce integration (Pro)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Technical Improvements\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress REST API\u003C\u002Fstrong> – Modern, reliable API architecture\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Action Scheduler Integration\u003C\u002Fstrong> – Stable background processing for queued tasks\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Print Templates\u003C\u002Fstrong> – Easy branding through child themes\u003C\u002Fli>\n\u003Cli>\u003Cstrong>HTML Email Templates\u003C\u002Fstrong> – Rich, beautiful email notifications\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Core Features\u003C\u002Fh3>\n\u003Ch3>\u003Cstrong>Complete Clinic Management\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Built with React 19\u003C\u002Fstrong> – Zero page reloads, instant responses\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Ffeature\u002Fmanage-appointment\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Appointment Booking System\u003C\u002Fstrong>\u003C\u002Fa> – Smart scheduling with conflict prevention\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Patient Records Management\u003C\u002Fstrong> – Comprehensive patient history\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fencounter-doctors\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Encounter (Patient Visits) Management\u003C\u002Fstrong>\u003C\u002Fa> – Track every patient interaction\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Ffeature\u002Fmanage-appointment\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Doctor Scheduling\u003C\u002Fstrong>\u003C\u002Fa> – Flexible session management\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Doctor Services\u003C\u002Fstrong> – Service catalog with pricing\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>\u003Cstrong>Multi-Role User System\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Complete role-based access control:\u003Cbr \u002F>\n– \u003Cstrong>Super Admin\u003C\u002Fstrong> – Full system control\u003Cbr \u002F>\n– \u003Cstrong>Clinic Admin\u003C\u002Fstrong> – Clinic-level management\u003Cbr \u002F>\n– \u003Cstrong>Doctor\u003C\u002Fstrong> – Patient care and scheduling\u003Cbr \u002F>\n– \u003Cstrong>Receptionist\u003C\u002Fstrong> – Front desk operations\u003Cbr \u002F>\n– \u003Cstrong>Patient\u003C\u002Fstrong> – Self-service portal\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Patient Portal\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Ffeature\u002Fpatient-portal\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Patient Self-Service Portal\u003C\u002Fstrong>\u003C\u002Fa> – Book, manage, and view appointments\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Medical History Access\u003C\u002Fstrong> – Patients can view their records\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Appointment Reminders\u003C\u002Fstrong> – Email notifications\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Website Integration\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cp>Powerful widgets & blocks for your website:\u003Cbr \u002F>\n– \u003Cstrong>Booking Form \u002F Button\u003C\u002Fstrong> – \u003Ccode>[kivicareBookAppointmentButton]\u003C\u002Fcode>\u003Cbr \u002F>\n– \u003Cstrong>Doctor List Widget\u003C\u002Fstrong> – Showcase your medical team\u003Cbr \u002F>\n– \u003Cstrong>Login\u002FRegister Page\u003C\u002Fstrong> – \u003Ccode>[kivicareRegisterLogin]\u003C\u002Fcode>\u003Cbr \u002F>\n– \u003Cstrong>Clinic List\u003C\u002Fstrong> – Display multiple locations\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Configuration & Customization\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Email Reminders & Notifications\u003C\u002Fstrong> – Automated patient communication\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Email Templates\u003C\u002Fstrong> – Brand your communications\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Fields\u003C\u002Fstrong> – Extend forms with custom data\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Powerful Settings Panel\u003C\u002Fstrong> – Comprehensive configuration options\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multilanguage Support\u003C\u002Fstrong> – Translation-ready\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Insightful Dashboard\u003C\u002Fstrong> – Real-time clinic overview\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Pro Features – Unlock Enterprise Power\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fkivicare-pro\u002F\" rel=\"nofollow ugc\">View KiviCare Pro\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Transform your clinic into a multi-location healthcare empire:\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>Multi-Clinic Enterprise\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fmulti-clinic\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Multi-Clinic Setup\u003C\u002Fstrong>\u003C\u002Fa> – Manage unlimited clinics from one dashboard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Centralized Administration\u003C\u002Fstrong> – Control all locations effortlessly\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Clinic-Specific Settings\u003C\u002Fstrong> – Customize each location independently\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Advanced Payments & E-Commerce\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fonline-payments\u002F\" rel=\"nofollow ugc\">\u003Cstrong>WooCommerce Integration\u003C\u002Fstrong>\u003C\u002Fa> – Full e-commerce payment processing\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multiple Payment Gateways\u003C\u002Fstrong> – Maximum payment flexibility\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Revenue Reports\u003C\u002Fstrong> – Track income across all clinics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Professional Scheduling\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fkivicare-pro\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Google Calendar Integration\u003C\u002Fstrong>\u003C\u002Fa> – Two-way sync with Google Calendar\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Calendar Sharing\u003C\u002Fstrong> – Share availability with colleagues\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Appointment Conflicts\u003C\u002Fstrong> – Automatic conflict prevention\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Advanced Communication\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fnotifications\u002F\" rel=\"nofollow ugc\">\u003Cstrong>SMS Alerts via Twilio\u003C\u002Fstrong>\u003C\u002Fa> – Automated SMS notifications\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fnotifications\u002F\" rel=\"nofollow ugc\">\u003Cstrong>WhatsApp Alerts\u003C\u002Fstrong>\u003C\u002Fa> – WhatsApp appointment reminders\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Notifications\u003C\u002Fstrong> – Design your own notification templates\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-Channel Communication\u003C\u002Fstrong> – Reach patients on their preferred platform\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Telemedicine Ready\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fzoom-googlemeet\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Zoom Integration (Addon)\u003C\u002Fstrong>\u003C\u002Fa> – Virtual consultations with video\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fzoom-googlemeet\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Google Meet Integration (Addon)\u003C\u002Fstrong>\u003C\u002Fa> – Secure virtual visits\u003C\u002Fli>\n\u003Cli>\u003Cstrong>One-Click Join\u003C\u002Fstrong> – Seamless telehealth experience\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Business Intelligence\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Advanced Reports\u003C\u002Fstrong> – Comprehensive clinic analytics\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Metrics\u003C\u002Fstrong> – Track KPIs and growth\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export Data\u003C\u002Fstrong> – CSV\u002FExcel exports for analysis\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Cstrong>Premium Customization\u003C\u002Fstrong>\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Advanced Styling Options\u003C\u002Fstrong> – Match your clinic branding\u003C\u002Fli>\n\u003Cli>\u003Cstrong>RTL Support\u003C\u002Fstrong> – Right-to-left language support\u003C\u002Fli>\n\u003Cli>\u003Cstrong>White Label Ready\u003C\u002Fstrong> – Remove KiviCare branding\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>KiviCare Premium Products\u003C\u002Fh3>\n\u003Cp>Build a complete digital healthcare ecosystem:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fdoctor-patient-clinic-appointment-plugin-wordpress\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-pro\" rel=\"nofollow ugc\">\u003Cstrong>KiviCare Pro\u003C\u002Fstrong>\u003C\u002Fa> – Enterprise clinic management\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fclinic-management-wordpress-theme-and-plugin\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-theme\" rel=\"nofollow ugc\">\u003Cstrong>KiviCare WordPress Theme\u003C\u002Fstrong>\u003C\u002Fa> – Professional clinic website\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fzoom-and-google-meet-telemedicine-addons\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-telemed\" rel=\"nofollow ugc\">\u003Cstrong>Zoom Telemed Addon\u003C\u002Fstrong>\u003C\u002Fa> – Video consultations\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fzoom-and-google-meet-telemedicine-addons\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-telemed\" rel=\"nofollow ugc\">\u003Cstrong>Google Meet Telemed Addon\u003C\u002Fstrong>\u003C\u002Fa> – Secure telemed solution\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkivicare.io\u002Fproduct\u002Fehr-management-flutter-mobile-app\u002F?utm_source=wordpressorg&utm_medium=wordpressorg-app\" rel=\"nofollow ugc\">\u003Cstrong>Flutter Mobile App\u003C\u002Fstrong>\u003C\u002Fa> – iOS & Android apps\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Professional Services\u003C\u002Fh3>\n\u003Cp>Need expert help with setup, migration, or customization?\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fiqonic.design\u002Fget-a-quote\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Get a Quote from Our Experts\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Support & Resources\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocumentation.iqonic.design\u002Fkivicare-wordpress\u002Fkivicare-lite\u002Fdocumentation\u002Fgetting-started\u002Fwelcome-to-kivicare-ehr\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Complete Documentation\u003C\u002Fstrong>\u003C\u002Fa> – Step-by-step guides\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=goPbrq1NL18&list=PLSPY71mRbPj9KOdEoxmP1Dpx7VdhEroXp\" rel=\"nofollow ugc\">\u003Cstrong>Video Tutorials\u003C\u002Fstrong>\u003C\u002Fa> – Visual learning resources\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Community Support\u003C\u002Fstrong> – Active user community\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Submit Feature Requests\u003C\u002Fh3>\n\u003Cp>We listen carefully! Have an idea to make KiviCare better?\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fiqonic.design\u002Ffeature-request\u002F?for_product=kivicare\" rel=\"nofollow ugc\">\u003Cstrong>Submit Your Feature Request\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>You Are In Good Company\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fkivicare.io\" rel=\"nofollow ugc\">\u003Cstrong>KiviCare\u003C\u002Fstrong>\u003C\u002Fa> is crafted by \u003Ca href=\"https:\u002F\u002Fiqonic.design\" rel=\"nofollow ugc\">\u003Cstrong>IQONIC Design\u003C\u002Fstrong>\u003C\u002Fa> – a team of expert, young, and dynamic creators of community-focused digital products. \u003Cstrong>Trusted by over 100,000+ individuals and businesses worldwide.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>More FREE Products from IQONIC\u003C\u002Fh3>\n\u003Cp>We love our community! Check out our other amazing free products:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgraphina-elementor-charts-and-graphs\u002F\" rel=\"ugc\">\u003Cstrong>Graphina\u003C\u002Fstrong>\u003C\u002Fa> – The most powerful Elementor charts and graphs plugin\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmarvy-animation-addons-for-elementor-lite\u002F\" rel=\"ugc\">\u003Cstrong>MARVY\u003C\u002Fstrong>\u003C\u002Fa> – Coolest background animations for Elementor\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-roadmap\u002F\" rel=\"ugc\">\u003Cstrong>WP Roadmap\u003C\u002Fstrong>\u003C\u002Fa> – Create product roadmaps and feedback boards\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Connect With Us on Social Media\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.instagram.com\u002Fiqonicdesign\u002F\" rel=\"nofollow ugc\">Instagram\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fiqonicdesign\" rel=\"nofollow ugc\">YouTube\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdribbble.com\u002FIqonicDesign\" rel=\"nofollow ugc\">Dribbble\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fiqonicdesign\u002F\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fiqonicdesign\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","KiviCare is an impressive clinic and patient management plugin (EHR).",2000,114338,70,22,"2026-03-02T12:44:00.000Z","6.9.4","3.0.1","8.0",[20,21,22,23,24],"appointment-management","clinic-management","clinic-management-solution","doctor-management","patient-management","https:\u002F\u002Fkivicare.io","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkivicare-clinic-management-system.4.2.0.zip",82,17,0,"2026-03-23 00:00:00","2026-03-15T15:16:48.613Z",[33,49,61,77,88,100,112,124,135,146,156,164,179,192,202,211,219],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2026-25383","kivicare-clinic-patient-management-system-ehr-reflected-cross-site-scripting","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.6.16 - Reflected Cross-Site Scripting","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.6.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=3.6.16","4.0.0","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-03-26 20:45:26",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F8a5d32fc-41cd-4477-af2d-4a9709b05e72?source=api-prod",4,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":54,"cvss_vector":55,"vuln_type":56,"published_date":30,"updated_date":57,"references":58,"days_to_patch":60},"CVE-2026-25034","kivicare-clinic-patient-management-system-ehr-missing-authorization-2","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.6.16 - Missing Authorization","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.6.16. This makes it possible for unauthenticated attackers to perform an unauthorized action.",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2026-04-02 15:53:47",[59],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F9b19240c-d143-4360-9696-47358983178f?source=api-prod",11,{"id":62,"url_slug":63,"title":64,"description":65,"plugin_slug":4,"theme_slug":38,"affected_versions":66,"patched_in_version":67,"severity":68,"cvss_score":69,"cvss_vector":70,"vuln_type":71,"published_date":72,"updated_date":73,"references":74,"days_to_patch":76},"CVE-2026-2991","kivicare-clinic-patient-management-system-ehr-unauthenticated-authentication-bypass-via-social-login-token","KiviCare – Clinic & Patient Management System (EHR) \u003C= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2. This is due to the `patientSocialLogin()` function not verifying the social provider access token before authenticating a user. This makes it possible for unauthenticated attackers to log in as any patient registered on the system by providing only their email address and an arbitrary value for the access token, bypassing all credential verification. The attacker gains access to sensitive medical records, appointments, prescriptions, and billing information (PII\u002FPHI breach). Additionally, authentication cookies are set before the role check, meaning the auth cookies for non-patient users (including administrators) are also set in the HTTP response headers, even though a 403 response is returned.","\u003C=4.1.2","4.1.3","high",7.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L","Improper Authentication","2026-03-17 00:00:00","2026-03-24 16:03:10",[75],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F8d22448b-aa8e-4775-b7c5-e7bae94a3f6d?source=api-prod",8,{"id":78,"url_slug":79,"title":80,"description":81,"plugin_slug":4,"theme_slug":38,"affected_versions":66,"patched_in_version":67,"severity":68,"cvss_score":82,"cvss_vector":83,"vuln_type":56,"published_date":72,"updated_date":84,"references":85,"days_to_patch":87},"CVE-2026-2992","kivicare-missing-authorization-to-unauthenticated-privilege-escalation-via-setup-wizard","KiviCare \u003C= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the `\u002Fwp-json\u002Fkivicare\u002Fv1\u002Fsetup-wizard\u002Fclinic` REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated attackers to create a new clinic and a WordPress user with clinic admin privileges.",8.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N","2026-03-18 15:28:32",[86],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fd96743ea-08b1-4b4c-9d62-558b97a6e297?source=api-prod",2,{"id":89,"url_slug":90,"title":91,"description":92,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":93,"cvss_vector":94,"vuln_type":95,"published_date":96,"updated_date":97,"references":98,"days_to_patch":76},"CVE-2026-25022","kivicare-authenticated-receptionist-sql-injection","KiviCare \u003C= 3.6.16 - Authenticated (Receptionist+) SQL Injection","The KiviCare plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.6.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with receptionist-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","2026-02-01 18:08:24","2026-02-09 22:17:59",[99],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fcfbbb8cf-ea03-4a99-92a2-6d0672c82190?source=api-prod",{"id":101,"url_slug":102,"title":103,"description":104,"plugin_slug":4,"theme_slug":38,"affected_versions":105,"patched_in_version":106,"severity":41,"cvss_score":54,"cvss_vector":55,"vuln_type":56,"published_date":107,"updated_date":108,"references":109,"days_to_patch":111},"CVE-2026-0927","kivicare-clinic-patient-management-system-ehr-missing-authorization-to-unauthenticated-limited-arbitrary-file-upload","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.6.15 - Missing Authorization to Unauthenticated  Limited Arbitrary File Upload","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization checks in the uploadMedicalReport() function in all versions up to, and including, 3.6.15. This makes it possible for unauthenticated attackers to upload text files and PDF documents to the affected site's server which may be leveraged for further attacks such as hosting malicious content or phishing pages via PDF files.","\u003C=3.6.15","3.6.16","2026-01-22 17:11:21","2026-01-23 05:29:50",[110],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F489931ef-bac3-4de8-84ec-6f226d96f778?source=api-prod",1,{"id":113,"url_slug":114,"title":115,"description":116,"plugin_slug":4,"theme_slug":38,"affected_versions":117,"patched_in_version":118,"severity":41,"cvss_score":93,"cvss_vector":94,"vuln_type":95,"published_date":119,"updated_date":120,"references":121,"days_to_patch":123},"CVE-2025-66095","kivicare-authenticated-patient-sql-injection","KiviCare \u003C= 3.6.13 - Authenticated (Patient+) SQL Injection","The KiviCare plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.6.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with patient-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","\u003C=3.6.13","3.6.14","2025-11-27 00:00:00","2025-12-01 17:13:33",[122],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fd56ce525-c6af-42ac-9c74-ffce65dda2ae?source=api-prod",5,{"id":125,"url_slug":126,"title":127,"description":128,"plugin_slug":4,"theme_slug":38,"affected_versions":129,"patched_in_version":130,"severity":41,"cvss_score":93,"cvss_vector":94,"vuln_type":95,"published_date":131,"updated_date":132,"references":133,"days_to_patch":111},"CVE-2025-1572","kivicare-clinic-patient-management-system-ehr-authenticated-doctor-sql-injection-via-uid-parameter","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the ‘u_id’ parameter in all versions up to, and including, 3.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with doctor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","\u003C=3.6.7","3.6.8","2025-02-27 19:24:13","2025-02-28 07:34:39",[134],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Feb6b0c35-b478-4616-a708-1fd243c95c14?source=api-prod",{"id":136,"url_slug":137,"title":138,"description":139,"plugin_slug":4,"theme_slug":38,"affected_versions":140,"patched_in_version":141,"severity":41,"cvss_score":93,"cvss_vector":94,"vuln_type":95,"published_date":142,"updated_date":143,"references":144,"days_to_patch":111},"CVE-2024-11730","kivicare-clinic-patient-management-system-ehr-authenticated-doctorreceptionist-sql-injection","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.6.4 - Authenticated (Doctor\u002FReceptionist+) SQL Injection","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'sort[]' parameter of the static_data_list AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with doctor\u002Freceptionist-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","\u003C=3.6.4","3.6.5","2024-12-05 00:00:00","2024-12-06 11:09:11",[145],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F30f2a3ee-7f95-478c-b3d7-c254b9472d42?source=api-prod",{"id":147,"url_slug":148,"title":149,"description":150,"plugin_slug":4,"theme_slug":38,"affected_versions":140,"patched_in_version":141,"severity":68,"cvss_score":151,"cvss_vector":152,"vuln_type":95,"published_date":142,"updated_date":153,"references":154,"days_to_patch":111},"CVE-2024-11728","kivicare-clinic-patient-management-system-ehr-unauthenticated-sql-injection","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.6.4 - Unauthenticated SQL Injection","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'visit_type[service_id]' parameter of the tax_calculated_data AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","2024-12-06 09:23:00",[155],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F53c18834-3026-4d4d-888b-add314a0e56e?source=api-prod",{"id":157,"url_slug":158,"title":159,"description":160,"plugin_slug":4,"theme_slug":38,"affected_versions":140,"patched_in_version":141,"severity":41,"cvss_score":93,"cvss_vector":94,"vuln_type":95,"published_date":142,"updated_date":161,"references":162,"days_to_patch":111},"CVE-2024-11729","kivicare-clinic-patient-management-system-ehr-authenticated-subscriber-sql-injection","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.6.4 - Authenticated (Subscriber+) SQL Injection","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'service_list[0][service_id]' parameter of the get_widget_payment_options AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","2024-12-06 11:09:12",[163],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F86632212-37b5-4280-8a2a-163957ad9787?source=api-prod",{"id":165,"url_slug":166,"title":167,"description":168,"plugin_slug":4,"theme_slug":38,"affected_versions":169,"patched_in_version":170,"severity":41,"cvss_score":171,"cvss_vector":172,"vuln_type":173,"published_date":174,"updated_date":175,"references":176,"days_to_patch":178},"CVE-2024-35659","kivicare-authenticated-patient-insecure-direct-object-reference","KiviCare \u003C= 3.6.6 - Authenticated (Patient+) Insecure Direct Object Reference","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.6.6 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with patient-level access and above, to perform an unauthorized action.","\u003C=3.6.6","3.6.7",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","Authorization Bypass Through User-Controlled Key","2024-06-03 00:00:00","2025-01-30 16:13:28",[177],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa981e454-32ba-494d-b47f-769a1e544e16?source=api-prod",242,{"id":180,"url_slug":181,"title":182,"description":183,"plugin_slug":4,"theme_slug":38,"affected_versions":184,"patched_in_version":185,"severity":41,"cvss_score":93,"cvss_vector":94,"vuln_type":186,"published_date":187,"updated_date":188,"references":189,"days_to_patch":191},"CVE-2023-2623","kivicare-clinic-patient-management-system-ehr-sensitive-information-exposure","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.2.0 - Sensitive Information Exposure","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.2.0. This can allow authenticated attackers to extract sensitive data including emails, hashed passwords, and usernames.",">=3.2.0 \u003C=3.2.0","3.2.1","Exposure of Sensitive Information to an Unauthorized Actor","2023-06-05 00:00:00","2024-01-22 19:56:02",[190],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F39404341-8a27-4770-b6a6-d33e899b6bd8?source=api-prod",232,{"id":193,"url_slug":194,"title":195,"description":196,"plugin_slug":4,"theme_slug":38,"affected_versions":197,"patched_in_version":185,"severity":41,"cvss_score":93,"cvss_vector":198,"vuln_type":199,"published_date":187,"updated_date":188,"references":200,"days_to_patch":191},"CVE-2023-2628","kivicare-clinic-patient-management-system-ehr-cross-site-request-forgery","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.2.0 - Cross-Site Request Forgery","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to perform multiple unauthorized actions (e.g., deleting arbitrary appointments and medical records, or creating and updating users, etc.) via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=3.2.0","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N","Cross-Site Request Forgery (CSRF)",[201],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F4101c35e-5af9-4372-9ed1-fb6a15d8500f?source=api-prod",{"id":203,"url_slug":204,"title":205,"description":206,"plugin_slug":4,"theme_slug":38,"affected_versions":197,"patched_in_version":185,"severity":41,"cvss_score":207,"cvss_vector":208,"vuln_type":56,"published_date":187,"updated_date":188,"references":209,"days_to_patch":191},"CVE-2023-2627","kivicare-clinic-patient-management-system-ehr-missing-authorization","KiviCare – Clinic & Patient Management System (EHR) \u003C= 3.2.0 - Missing Authorization","The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to unauthorized access to and modification of data due to missing capability checks on multiple AJAX functions in versions up to, and including, 3.2.0. This makes it possible for authenticated attackers with subscriber-level privileges or above to modify plugin settings including adding arbitrary clinics, doctors, receptionists, and appointment as well as viewing plugin configuration.",5.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[210],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F88898997-6199-4b33-bd35-70a1a01812ec?source=api-prod",{"id":212,"url_slug":213,"title":214,"description":215,"plugin_slug":4,"theme_slug":38,"affected_versions":216,"patched_in_version":185,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":187,"updated_date":188,"references":217,"days_to_patch":191},"CVE-2023-2624","kivicare-reflected-cross-site-scripting-via-filtertype","KiviCare \u003C= 3.2.0 - Reflected Cross-Site Scripting via 'filterType'","The KiviCare plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'filterType' parameter in versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.","\u003C3.2.1",[218],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc0c57743-9fdd-4fc0-9a27-787834b64846?source=api-prod",{"id":220,"url_slug":221,"title":222,"description":223,"plugin_slug":4,"theme_slug":38,"affected_versions":224,"patched_in_version":225,"severity":226,"cvss_score":227,"cvss_vector":228,"vuln_type":95,"published_date":229,"updated_date":188,"references":230,"days_to_patch":232},"CVE-2022-0786","kivicare-clinic-patient-management-system-ehr-sql-injection","KiviCare – Clinic & Patient Management System (EHR) \u003C= 2.3.8 - SQL Injection","The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route, leading to SQL Injections exploitable by unauthenticated users","\u003C=2.3.8","2.3.9","critical",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","2022-05-23 00:00:00",[231],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc7a97aeb-f34c-4997-864b-132bb5ed28e7?source=api-prod",610,{"slug":234,"display_name":7,"profile_url":8,"plugin_count":123,"total_installs":235,"avg_security_score":236,"avg_patch_time_days":27,"trust_score":27,"computed_at":237},"iqonicdesign",17210,92,"2026-04-04T12:28:27.601Z",[239],{"slug":240,"name":241,"version":242,"author":243,"author_profile":244,"description":245,"short_description":246,"active_installs":247,"downloaded":248,"rating":29,"num_ratings":29,"last_updated":249,"tested_up_to":16,"requires_at_least":250,"requires_php":251,"tags":252,"homepage":258,"download_link":259,"security_score":260,"vuln_count":111,"unpatched_count":29,"last_vuln_date":261,"fetched_at":31},"bma-lite-appointment-booking-and-scheduling","BMA Lite – Appointment Booking and Scheduling","1.4.4","RedefiningTheWeb","https:\u002F\u002Fprofiles.wordpress.org\u002Fredefiningtheweb\u002F","\u003Cp>Streamline your scheduling with Book My Appointment (BMA), the ultimate appointment booking plugin designed for enterprises. Seamlessly manage bookings, staff schedules, and customer appointments directly from your WordPress site. Perfect for businesses of any size, BMA adapts to your needs with advanced customization and enterprise-level performance.\u003C\u002Fp>\n\u003Cp>Simplify scheduling, enhance productivity, and deliver exceptional service with BMA!\u003C\u002Fp>\n\u003Cp>Make a smart move with \u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Fbma-wordpress-appointment-booking-plugin-for-enterprise\u002F25230155\" rel=\"nofollow ugc\">BMA – WordPress Appointment Booking Plugin for Enterprise\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpdemo.redefiningtheweb.com\u002Fwordpress-book-my-appointment\u002Ftemplate-7\u002F\" rel=\"nofollow ugc\">FRONT-END DEMO\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fredefiningtheweb.com\u002Fdocs\u002Fbma-wordpress-appointment-booking-plugin-for-enterprise\u002F\" rel=\"nofollow ugc\">DOCUMENTATION\u003C\u002Fa> | \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Fbma-wordpress-appointment-booking-plugin-for-enterprise\u002F25230155\" rel=\"nofollow ugc\">PRO WITH 50% DISCOUNT\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Why is Book My Appointment Plugin Important for Your Business\u002FIndustry?\u003C\u002Fh3>\n\u003Cp>Whether you run a beauty parlor or want to recruit new employees in a corporate organization, Book My Appointment lite eases the task of scheduling appointments in an organized manner making your task hassle-free and accurate.\u003C\u002Fp>\n\u003Cp>If you are using a WordPress powered website to promote any business, company or services, the Book My Appointment lite is the ultimate high functional plugin for regulating appointment bookings and scheduling requirements.\u003C\u002Fp>\n\u003Cp>This easy to install and use WordPress plugin serves almost every business\u002F industry including:\u003C\u002Fp>\n\u003Ch3>Health and Wellness:\u003C\u002Fh3>\n\u003Cp>Aromatherapy, Spa, Ayurvedic Care Centers, Physiotherapy, Acupuncture, Chiropractic Care\u003C\u002Fp>\n\u003Ch3>Hospitals\u002FClinics:\u003C\u002Fh3>\n\u003Cp>Doctors, Ambulance Services, Dentists, Ophthalmologists, Pediatricians\u003C\u002Fp>\n\u003Ch3>Educational Institutions:\u003C\u002Fh3>\n\u003Cp>Schools, Colleges, Universities, Coaching Centers\u003C\u002Fp>\n\u003Ch3>Salons and Parlors:\u003C\u002Fh3>\n\u003Cp>Beauty parlors, Tattoo salons, Nail Art Salons, Tanning Salons\u003C\u002Fp>\n\u003Ch3>Governmental Organizations:\u003C\u002Fh3>\n\u003Cp>Government Offices\u003C\u002Fp>\n\u003Ch3>Professional Services:\u003C\u002Fh3>\n\u003Cp>Lawyers, Tax Consultants, Insurance Agents, Life Coaching, PR Services\u003C\u002Fp>\n\u003Ch3>Fitness and Recreation:\u003C\u002Fh3>\n\u003Cp>Gyms, Yoga Centers, Health Clubs, Aerobics Centers\u003C\u002Fp>\n\u003Ch3>Training Institutes:\u003C\u002Fh3>\n\u003Cp>Vehicle training, Personality Development, Vocational Training\u003C\u002Fp>\n\u003Ch3>Small and Mid-size Businesses:\u003C\u002Fh3>\n\u003Cp>Interview scheduling, Meetings, Webinars, Seminars\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Ch3>Enhance Productivity and Service Quality\u003C\u002Fh3>\n\u003Cp>With an organized appointment booking system, you can set specific working hour limits for all employees including day-offs.\u003C\u002Fp>\n\u003Ch3>Simplified Clutter-Free Design\u003C\u002Fh3>\n\u003Cp>The appointment booking form is simple to understand for the clients with a clean look. It eases entering information in the fields quickly and complete the procedure in a few seconds.\u003C\u002Fp>\n\u003Ch3>Set Prices According to Services\u002FProviders\u003C\u002Fh3>\n\u003Cp>All services are not the same so are the charges separate for different staff members in the clinic, professional service providers, etc. You can add different prices for specific staff, services and so much more.\u003C\u002Fp>\n\u003Ch3>Receive and Accept Bookings Anytime Anywhere\u003C\u002Fh3>\n\u003Cp>This plugin offers an automated system allowing the clients to book services and appointments 24×7.\u003C\u002Fp>\n\u003Ch3>Premium Features\u003C\u002Fh3>\n\u003Ch3>BMA – WordPress Appointment Booking Plugin for Enterprise- Advanced, Fast, Easy, Highly Functional, Robust Plugin for WordPress Websites The Book My Appointment is much more than a premium plugin for automated booking and scheduling appointments.\u003C\u002Fh3>\n\u003Cp>In addition to offering a secure and accurately functioning appointment-booking tool, it also serves as a notification generator that helps you to run email campaigns, send reminder messages to clients via SMS and emails. Besides, scheduling appointments, sending emails, reminder notifications, you can even accept payments via different gateways (PayPal, Stripe) or simply allow the clients to ‘pay at the time of visit\u002Farrival’ using this single plugin directly from your WordPress site.\u003C\u002Fp>\n\u003Ch3>Key Features:\u003C\u002Fh3>\n\u003Cpre>\u003Ccode>*  Enhance Productivity and Service Quality\n*  Choose among 7 templates\n*  Allow separate template for Mobile, Tablet & Desktop \n*  Google Two Way Sync\n*  Simplified Clutter-Free Design\n*  Unlimited Bookings\n*  Set Prices According to Services\u002FProviders\n*  Category wise Services Sorting\n*  Booking Cancellation Option (With Minimum Notice Periods)\n*  Manual Search Option Using Filters\n*  Receive and Accept Bookings Anytime Anywhere\n*  Add Holidays\n*  Send Booking Notifications to Your Clients\u002FEmployees\n*  Run Email Campaign\n*  Accept Payments Online\u002FOffline\n*  24×7 Customer Support\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>= For Premium Plugin you can \u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Fbma-wordpress-appointment-booking-plugin-for-enterprise\u002F25230155\" rel=\"nofollow ugc\">visit here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Follow Us\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fredefiningtheweb.com\u002F\" rel=\"nofollow ugc\">Official Website\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fvendor\u002Fredefiningtheweb\u002F\" rel=\"nofollow ugc\">WooCommerce Portfolio\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fuser\u002Fredefiningtheweb\u002Fportfolio\" rel=\"nofollow ugc\">CodeCanyon Portfolio\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fredefiningtheweb\u002F\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FWebRedefining\u002F\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fredefiningtheweb\u002F\" rel=\"nofollow ugc\">Linkedin\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Third Party\u002FExternal Services\u003C\u002Fh3>\n\u003Cp>This plugin integrates with the MSG91 SMS API to send SMS notifications.\u003C\u002Fp>\n\u003Cp>Service Provider:\u003Cbr \u002F>\nMSG91\u003C\u002Fp>\n\u003Cp>Service URLs:\u003Cbr \u002F>\nhttps:\u002F\u002Fapi.msg91.com\u002F\u003C\u002Fp>\n\u003Cp>Purpose:\u003Cbr \u002F>\nUsed for sending SMS notifications related to appointments and booking events.\u003C\u002Fp>\n\u003Cp>Data Shared:\u003Cbr \u002F>\nPhone number, message content, sender ID, and country code.\u003C\u002Fp>\n\u003Cp>Terms of Service:\u003Cbr \u002F>\nhttps:\u002F\u002Fmsg91.com\u002Fterms\u003C\u002Fp>\n\u003Cp>Privacy Policy:\u003Cbr \u002F>\nhttps:\u002F\u002Fmsg91.com\u002Fprivacy-policy\u003C\u002Fp>\n","The BMA Lite - Appointment Booking and Scheduling Plugin is a lite version of BMA - WordPress Appointment Booking Plugin for Enterprise.",10,4776,"2026-01-31T17:28:00.000Z","3.0","",[253,254,255,256,257],"booking-calendar","booking-services","online-appointment-management-software","online-booking","wordpress-appointment-booking-plugin","https:\u002F\u002Fwww.redefiningtheweb.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbma-lite-appointment-booking-and-scheduling.1.4.4.zip",99,"2025-04-16 00:00:00",{"attackSurface":263,"codeSignals":583,"taintFlows":856,"riskAssessment":894,"analyzedAt":907},{"hooks":264,"ajaxHandlers":577,"restRoutes":578,"shortcodes":579,"cronEvents":580,"entryPointCount":29,"unprotectedCount":29},[265,271,276,279,285,289,293,297,301,304,307,311,313,316,318,321,323,326,329,332,337,341,344,346,349,353,356,360,364,368,372,375,379,383,387,389,392,397,400,403,407,410,412,416,419,421,424,427,431,435,439,443,448,451,455,456,459,461,465,468,472,475,480,484,488,491,495,499,503,507,511,515,519,523,527,530,535,539,542,546,549,553,556,559,562,565,568,571,573,574],{"type":266,"name":267,"callback":268,"file":269,"line":270},"action","wp_enqueue_scripts","registerAssets","app\\abstracts\\KCShortcodeAbstract.php",98,{"type":266,"name":272,"callback":273,"file":274,"line":275},"admin_menu","addMenuItems","app\\admin\\AdminMenu.php",19,{"type":266,"name":277,"callback":278,"file":274,"line":236},"admin_footer","closure",{"type":280,"name":281,"callback":282,"file":283,"line":284},"filter","rewrite_rules_array","add_dashboard_rewrite_rules","app\\admin\\KCDashboardPermalinkHandler.php",36,{"type":280,"name":286,"callback":287,"file":283,"line":288},"query_vars","register_query_vars",37,{"type":280,"name":290,"callback":291,"priority":260,"file":283,"line":292},"template_include","handle_template_include",38,{"type":266,"name":294,"callback":295,"file":283,"line":296},"init","add_permalink_tags",39,{"type":280,"name":298,"callback":299,"file":283,"line":300},"show_admin_bar","__return_false",190,{"type":266,"name":267,"callback":278,"priority":302,"file":283,"line":303},999,194,{"type":280,"name":305,"callback":278,"file":283,"line":306},"heartbeat_settings",237,{"type":266,"name":294,"callback":308,"file":309,"line":310},"register_shortcodes","app\\baseClasses\\KCApp.php",45,{"type":266,"name":294,"callback":294,"file":309,"line":312},47,{"type":266,"name":294,"callback":314,"file":309,"line":315},"get_instance",49,{"type":266,"name":294,"callback":294,"file":309,"line":317},51,{"type":266,"name":319,"callback":314,"file":309,"line":320},"rest_api_init",53,{"type":266,"name":319,"callback":314,"file":309,"line":322},54,{"type":266,"name":324,"callback":314,"file":309,"line":325},"plugins_loaded",57,{"type":266,"name":294,"callback":327,"file":309,"line":328},"register",60,{"type":266,"name":324,"callback":330,"file":309,"line":331},"init_elementor_integration",63,{"type":280,"name":333,"callback":334,"priority":335,"file":309,"line":336},"authenticate","prevent_inactive_user_login",30,65,{"type":280,"name":338,"callback":339,"priority":260,"file":309,"line":340},"determine_current_user","validate_current_user_status",68,{"type":280,"name":342,"callback":278,"file":309,"line":343},"woocommerce_rest_check_permissions",71,{"type":266,"name":294,"callback":278,"file":309,"line":345},88,{"type":280,"name":347,"callback":278,"file":309,"line":348},"cron_schedules",89,{"type":280,"name":350,"callback":351,"priority":302,"file":309,"line":352},"login_redirect","kc_redirect_kivicare_user_to_dashboard",101,{"type":280,"name":294,"callback":354,"file":309,"line":355},"kivicare_migrate_apt_booking_steps",103,{"type":280,"name":357,"callback":358,"file":309,"line":359},"ajax_query_attachments_args","restrict_media_library",106,{"type":266,"name":361,"callback":362,"file":309,"line":363},"elementor\u002Felements\u002Fcategories_registered","register_elementor_category",215,{"type":266,"name":365,"callback":366,"file":309,"line":367},"elementor\u002Fwidgets\u002Fregister","register_elementor_widgets",218,{"type":266,"name":294,"callback":369,"file":370,"line":371},"init_roles_and_capabilities","app\\baseClasses\\KCPermissions.php",548,{"type":266,"name":294,"callback":373,"file":374,"line":275},"register_blocks","app\\blocks\\KCBlocksRegister.php",{"type":266,"name":376,"callback":377,"file":374,"line":378},"enqueue_block_editor_assets","enqueue_editor_assets",20,{"type":280,"name":380,"callback":381,"priority":247,"file":374,"line":382},"block_categories_all","register_block_category",21,{"type":266,"name":384,"callback":278,"file":385,"line":386},"set_logged_in_cookie","app\\controllers\\api\\AuthController.php",780,{"type":266,"name":384,"callback":278,"file":385,"line":388},1415,{"type":266,"name":319,"callback":390,"file":391,"line":335},"registerRoutes","app\\controllers\\api\\SettingsController\\GoogleEventTemplate.php",{"type":266,"name":393,"callback":394,"priority":247,"file":395,"line":396},"kc_doctor_save","handleDoctorSave","app\\controllers\\filters\\KCDoctorControllerFilters.php",18,{"type":266,"name":398,"callback":399,"priority":247,"file":395,"line":275},"kc_doctor_update","handleDoctorUpdate",{"type":280,"name":401,"callback":402,"priority":247,"file":395,"line":378},"kc_doctor_data","addCustomFieldDataToResponse",{"type":266,"name":404,"callback":405,"priority":247,"file":406,"line":396},"kc_patient_save","handlePatientSave","app\\controllers\\filters\\KCPatientControllerFilters.php",{"type":266,"name":408,"callback":409,"priority":247,"file":406,"line":275},"kc_patient_update","handlePatientUpdate",{"type":280,"name":411,"callback":402,"priority":247,"file":406,"line":378},"kc_patient_data",{"type":266,"name":319,"callback":413,"file":414,"line":415},"initializeControllers","app\\controllers\\KCRestAPI.php",85,{"type":266,"name":294,"callback":417,"file":418,"line":317},"initializeNotificationListeners","app\\emails\\KCEmailNotificationInit.php",{"type":266,"name":294,"callback":420,"file":418,"line":322},"initializeDynamicKeysSystem",{"type":280,"name":422,"callback":423,"priority":247,"file":418,"line":325},"kivicare_custom_email_key_value","handleCustomEmailKeys",{"type":266,"name":425,"callback":426,"priority":247,"file":418,"line":328},"kivicare_send_scheduled_email","execute_scheduled_email",{"type":266,"name":428,"callback":429,"file":418,"line":430},"kivicare_register_custom_dynamic_keys","registerCustomDynamicKeys",265,{"type":280,"name":432,"callback":433,"file":434,"line":331},"wp_mail_from","setFromEmail","app\\emails\\KCEmailSender.php",{"type":280,"name":436,"callback":437,"file":434,"line":438},"wp_mail_from_name","setFromName",64,{"type":266,"name":294,"callback":440,"file":441,"line":442},"registerPostTypes","app\\emails\\KCEmailTemplateManager.php",52,{"type":266,"name":444,"callback":445,"priority":247,"file":446,"line":447},"kc_after_create_appointment","handleAppointmentBooked","app\\emails\\listeners\\KCAppointmentNotificationListener.php",50,{"type":266,"name":449,"callback":450,"priority":247,"file":446,"line":320},"kc_appointment_cancelled","handleAppointmentCancelled",{"type":266,"name":452,"callback":453,"priority":247,"file":446,"line":454},"kivicare_after_payment_processed","handlePaymentProcessed",56,{"type":266,"name":452,"callback":445,"priority":247,"file":446,"line":325},{"type":266,"name":457,"callback":453,"priority":247,"file":446,"line":458},"kc_appointment_payment_completed",58,{"type":266,"name":457,"callback":445,"priority":247,"file":446,"line":460},59,{"type":266,"name":462,"callback":463,"priority":247,"file":446,"line":464},"kivicare_appointment_updated","handleAppointmentUpdated",62,{"type":266,"name":466,"callback":467,"priority":247,"file":446,"line":331},"kivicare_appointment_confirmed","handleAppointmentConfirmed",{"type":266,"name":469,"callback":470,"priority":247,"file":446,"line":471},"kivicare_appointment_reminder","handleAppointmentReminder",66,{"type":266,"name":393,"callback":473,"priority":247,"file":474,"line":288},"handleDoctorRegistered","app\\emails\\listeners\\KCDoctorNotificationListener.php",{"type":266,"name":476,"callback":477,"priority":247,"file":478,"line":479},"kc_encounter_closed","handleEncounterClosed","app\\emails\\listeners\\KCEncounterNotificationListener.php",40,{"type":266,"name":481,"callback":482,"priority":247,"file":483,"line":292},"kc_invoice_generated","handleInvoiceGenerated","app\\emails\\listeners\\KCInvoiceNotificationListener.php",{"type":266,"name":485,"callback":486,"priority":247,"file":487,"line":479},"kc_appointment_status_update","handleAppointmentStatusUpdate","app\\emails\\listeners\\KCPatientCheckInNotificationListener.php",{"type":266,"name":404,"callback":489,"priority":247,"file":490,"line":288},"handlePatientRegistered","app\\emails\\listeners\\KCPatientNotificationListener.php",{"type":266,"name":492,"callback":493,"priority":247,"file":494,"line":296},"kc_payment_pending","handlePaymentPending","app\\emails\\listeners\\KCPaymentNotificationListener.php",{"type":266,"name":496,"callback":497,"priority":247,"file":494,"line":498},"kc_payment_overdue","handlePaymentOverdue",42,{"type":266,"name":500,"callback":501,"priority":247,"file":502,"line":479},"kc_prescription_created","handlePrescriptionCreated","app\\emails\\listeners\\KCPrescriptionNotificationListener.php",{"type":266,"name":504,"callback":505,"priority":247,"file":502,"line":506},"kc_prescription_updated","handlePrescriptionUpdated",43,{"type":266,"name":508,"callback":509,"priority":247,"file":510,"line":288},"kc_receptionist_save","handleReceptionistRegistered","app\\emails\\listeners\\KCReceptionistNotificationListener.php",{"type":266,"name":512,"callback":513,"priority":247,"file":514,"line":284},"kc_user_verified","handleUserVerified","app\\emails\\listeners\\KCUserVerificationNotificationListener.php",{"type":266,"name":516,"callback":517,"file":518,"line":382},"wp_loaded","createExportDirectory","app\\helpers\\KCExportHelper.php",{"type":266,"name":520,"callback":521,"file":518,"line":522},"kivicare_cleanup_exports","cleanupOldExports",24,{"type":280,"name":524,"callback":525,"file":518,"line":526},"upload_mimes","addExportMimeTypes",32,{"type":266,"name":294,"callback":528,"file":518,"line":529},"handleExportDownload",35,{"type":280,"name":531,"callback":532,"priority":247,"file":533,"line":534},"pronamic_payment_redirect_url","filter_redirect_url","app\\paymentGateways\\KCKnitPay.php",48,{"type":280,"name":536,"callback":537,"priority":111,"file":538,"line":498},"woocommerce_get_cart_item_from_session","get_cart_items_from_session","app\\paymentGateways\\KCWooCommerce.php",{"type":266,"name":540,"callback":541,"priority":247,"file":538,"line":506},"woocommerce_checkout_update_order_meta","add_appointment_meta_to_order",{"type":266,"name":543,"callback":544,"file":538,"line":545},"before_delete_post","handle_product_delete",44,{"type":266,"name":547,"callback":548,"priority":247,"file":538,"line":310},"woocommerce_new_order","handle_new_order_created",{"type":266,"name":550,"callback":551,"priority":247,"file":538,"line":552},"woocommerce_checkout_create_order_line_item","add_cart_item_meta_to_order",46,{"type":266,"name":554,"callback":555,"priority":247,"file":538,"line":312},"woocommerce_order_status_changed","handle_order_status_change",{"type":266,"name":557,"callback":558,"file":538,"line":534},"woocommerce_payment_complete","handle_payment_complete",{"type":266,"name":560,"callback":561,"priority":247,"file":538,"line":315},"woocommerce_order_status_failed","handle_payment_failure",{"type":266,"name":563,"callback":564,"file":538,"line":447},"woocommerce_cart_calculate_fees","add_kivicare_taxes_to_cart",{"type":280,"name":566,"callback":567,"priority":247,"file":538,"line":317},"woocommerce_order_item_needs_processing","skip_processing_for_appointments",{"type":266,"name":569,"callback":278,"priority":247,"file":538,"line":570},"kivicare_wc_auto_cancel_appointment",55,{"type":266,"name":294,"callback":278,"priority":111,"file":572,"line":343},"kivicare-clinic-management-system.php",{"type":266,"name":324,"callback":278,"priority":111,"file":572,"line":27},{"type":266,"name":575,"callback":278,"file":572,"line":576},"admin_notices",145,[],[],[],[581],{"hook":520,"callback":520,"file":518,"line":582},28,{"dangerousFunctions":584,"sqlUsage":585,"outputEscaping":729,"fileOperations":60,"externalRequests":850,"nonceChecks":851,"capabilityChecks":848,"bundledLibraries":852},[],{"prepared":586,"raw":343,"locations":587},119,[588,591,595,598,602,605,607,609,612,614,617,619,621,623,625,627,629,631,634,636,638,640,642,644,646,648,650,652,654,656,658,660,662,664,667,670,672,674,676,679,680,682,683,684,685,686,687,688,689,690,692,694,696,698,701,702,704,705,708,710,712,714,716,717,718,720,722,723,724,725,728],{"file":589,"line":458,"context":590},"app\\controllers\\api\\SettingsController\\CommonSettings.php","$wpdb->get_var() with variable interpolation",{"file":592,"line":593,"context":594},"app\\controllers\\api\\SystemNoticesController.php",326,"$wpdb->get_col() with variable interpolation",{"file":596,"line":597,"context":594},"app\\database\\classes\\KCMigrator.php",226,{"file":599,"line":600,"context":601},"app\\database\\migrations\\2025_05_04_CreateAppointmentReminderMappingTable.php",29,"$wpdb->query() with variable interpolation",{"file":603,"line":604,"context":601},"app\\database\\migrations\\2025_05_04_CreateAppointmentServiceMappingTable.php",27,{"file":606,"line":296,"context":601},"app\\database\\migrations\\2025_05_04_CreateAppointmentsTable.php",{"file":608,"line":582,"context":601},"app\\database\\migrations\\2025_05_04_CreateBillItemsTable.php",{"file":610,"line":611,"context":601},"app\\database\\migrations\\2025_05_04_CreateBillsTable.php",33,{"file":613,"line":335,"context":601},"app\\database\\migrations\\2025_05_04_CreateClinicScheduleTable.php",{"file":615,"line":616,"context":601},"app\\database\\migrations\\2025_05_04_CreateClinicSessionsTable.php",31,{"file":618,"line":479,"context":601},"app\\database\\migrations\\2025_05_04_CreateClinicsTable.php",{"file":620,"line":582,"context":601},"app\\database\\migrations\\2025_05_04_CreateCustomFieldDataTable.php",{"file":622,"line":582,"context":601},"app\\database\\migrations\\2025_05_04_CreateCustomFieldsTable.php",{"file":624,"line":604,"context":601},"app\\database\\migrations\\2025_05_04_CreateDoctorClinicMappingsTable.php",{"file":626,"line":604,"context":601},"app\\database\\migrations\\2025_05_04_CreateGcalAppointmentMappingTable.php",{"file":628,"line":335,"context":601},"app\\database\\migrations\\2025_05_04_CreateMedicalHistoryTable.php",{"file":630,"line":526,"context":601},"app\\database\\migrations\\2025_05_04_CreateMedicalProblemsTable.php",{"file":632,"line":633,"context":601},"app\\database\\migrations\\2025_05_04_CreatePatientClinicMappingsTable.php",26,{"file":635,"line":611,"context":601},"app\\database\\migrations\\2025_05_04_CreatePatientEncountersTable.php",{"file":637,"line":604,"context":601},"app\\database\\migrations\\2025_05_04_CreatePatientEncountersTemplateMappingTable.php",{"file":639,"line":582,"context":601},"app\\database\\migrations\\2025_05_04_CreatePatientEncountersTemplateTable.php",{"file":641,"line":604,"context":601},"app\\database\\migrations\\2025_05_04_CreatePatientMedicalReportTable.php",{"file":643,"line":284,"context":601},"app\\database\\migrations\\2025_05_04_CreatePaymentsAppointmentMappingsTable.php",{"file":645,"line":616,"context":601},"app\\database\\migrations\\2025_05_04_CreatePrescriptionEnconterTemplateTable.php",{"file":647,"line":526,"context":601},"app\\database\\migrations\\2025_05_04_CreatePrescriptionTable.php",{"file":649,"line":633,"context":601},"app\\database\\migrations\\2025_05_04_CreateReceptionistClinicMappingsTable.php",{"file":651,"line":529,"context":601},"app\\database\\migrations\\2025_05_04_CreateServiceDoctorMappingTable.php",{"file":653,"line":582,"context":601},"app\\database\\migrations\\2025_05_04_CreateServicesTable.php",{"file":655,"line":600,"context":601},"app\\database\\migrations\\2025_05_04_CreateStaticDataTable.php",{"file":657,"line":600,"context":601},"app\\database\\migrations\\2025_05_04_CreateTaxDataTable.php",{"file":659,"line":526,"context":601},"app\\database\\migrations\\2025_05_04_CreateTaxesTable.php",{"file":661,"line":600,"context":601},"app\\database\\migrations\\2025_07_10_CreateAppointmentReminderMappingDataTable.php",{"file":663,"line":331,"context":601},"app\\database\\migrations\\2025_09_12_CreateCustomNotificationsTable.php",{"file":665,"line":666,"context":590},"app\\database\\migrations\\2025_10_15_OptimizeKiviCareCoreTables.php",635,{"file":665,"line":668,"context":669},652,"$wpdb->get_results() with variable interpolation",{"file":665,"line":671,"context":601},658,{"file":665,"line":673,"context":590},814,{"file":665,"line":675,"context":601},818,{"file":677,"line":582,"context":678},"app\\database\\migrations\\2026_02_09_AddEnhancedHolidayFields.php","$wpdb->get_row() with variable interpolation",{"file":677,"line":335,"context":601},{"file":677,"line":681,"context":678},34,{"file":677,"line":284,"context":601},{"file":677,"line":479,"context":678},{"file":677,"line":498,"context":601},{"file":677,"line":552,"context":678},{"file":677,"line":534,"context":601},{"file":677,"line":442,"context":678},{"file":677,"line":322,"context":601},{"file":677,"line":13,"context":601},{"file":677,"line":691,"context":601},72,{"file":677,"line":693,"context":601},74,{"file":677,"line":695,"context":601},76,{"file":677,"line":697,"context":601},78,{"file":699,"line":700,"context":601},"app\\database\\migrations\\2026_02_16_MergeContactNumberWithCountryCode.php",16,{"file":699,"line":526,"context":669},{"file":699,"line":703,"context":601},95,{"file":699,"line":260,"context":669},{"file":706,"line":707,"context":590},"app\\database\\migrations\\2026_02_17_MigrateAppointmentsToUTC.php",109,{"file":706,"line":709,"context":590},123,{"file":706,"line":711,"context":669},276,{"file":706,"line":713,"context":601},281,{"file":715,"line":604,"context":678},"app\\database\\migrations\\2026_02_19_AddAppointmentTimezoneColumn.php",{"file":715,"line":600,"context":601},{"file":715,"line":479,"context":601},{"file":715,"line":719,"context":601},69,{"file":721,"line":522,"context":678},"app\\database\\migrations\\2026_02_19_AddHolidayTimezoneColumn.php",{"file":721,"line":633,"context":601},{"file":721,"line":288,"context":601},{"file":721,"line":471,"context":601},{"file":726,"line":727,"context":601},"app\\database\\migrations\\2026_02_19_AddTimezonePerformanceIndexes.php",79,{"file":726,"line":270,"context":601},{"escaped":730,"rawEcho":325,"locations":731},518,[732,736,739,741,743,746,748,750,752,755,757,759,761,764,766,768,770,772,774,776,778,781,782,784,786,788,789,791,793,795,797,799,801,803,805,807,809,811,812,814,816,818,820,822,824,826,828,830,832,834,836,838,840,842,845,847,849],{"file":733,"line":734,"context":735},"app\\controllers\\api\\KCPrintInvoiceController.php",108,"raw output",{"file":737,"line":738,"context":735},"app\\elementor\\widgets\\ClinicListWidget.php",876,{"file":737,"line":740,"context":735},911,{"file":737,"line":742,"context":735},934,{"file":744,"line":745,"context":735},"app\\elementor\\widgets\\DoctorListWidget.php",1110,{"file":744,"line":747,"context":735},1143,{"file":744,"line":749,"context":735},1168,{"file":518,"line":751,"context":735},169,{"file":753,"line":754,"context":735},"app\\shortcodes\\KCBookAppointment.php",73,{"file":753,"line":756,"context":735},170,{"file":758,"line":604,"context":735},"app\\shortcodes\\KCBookAppointmentButton.php",{"file":758,"line":760,"context":735},105,{"file":762,"line":763,"context":735},"app\\shortcodes\\KCClinicListShortcode.php",80,{"file":762,"line":765,"context":735},91,{"file":762,"line":767,"context":735},152,{"file":762,"line":769,"context":735},174,{"file":771,"line":727,"context":735},"app\\shortcodes\\KCDoctorListShortcode.php",{"file":771,"line":773,"context":735},102,{"file":771,"line":775,"context":735},161,{"file":771,"line":777,"context":735},184,{"file":779,"line":780,"context":735},"app\\shortcodes\\KCRegisterLogin.php",162,{"file":779,"line":751,"context":735},{"file":783,"line":355,"context":735},"templates\\html-kc-dashboard.php",{"file":785,"line":378,"context":735},"templates\\KCInvoicePrintTemplate.php",{"file":785,"line":787,"context":735},93,{"file":785,"line":703,"context":735},{"file":785,"line":790,"context":735},112,{"file":785,"line":792,"context":735},126,{"file":785,"line":794,"context":735},131,{"file":785,"line":796,"context":735},134,{"file":785,"line":798,"context":735},137,{"file":785,"line":800,"context":735},156,{"file":785,"line":802,"context":735},159,{"file":785,"line":804,"context":735},163,{"file":785,"line":806,"context":735},167,{"file":785,"line":808,"context":735},177,{"file":785,"line":810,"context":735},180,{"file":785,"line":777,"context":735},{"file":785,"line":813,"context":735},188,{"file":785,"line":815,"context":735},198,{"file":785,"line":817,"context":735},201,{"file":785,"line":819,"context":735},205,{"file":785,"line":821,"context":735},210,{"file":785,"line":823,"context":735},225,{"file":785,"line":825,"context":735},228,{"file":785,"line":827,"context":735},231,{"file":785,"line":829,"context":735},292,{"file":785,"line":831,"context":735},304,{"file":785,"line":833,"context":735},316,{"file":785,"line":835,"context":735},328,{"file":785,"line":837,"context":735},333,{"file":785,"line":839,"context":735},336,{"file":785,"line":841,"context":735},347,{"file":843,"line":844,"context":735},"templates\\PrescriptionEmailTable.php",13,{"file":843,"line":846,"context":735},14,{"file":843,"line":848,"context":735},15,{"file":843,"line":700,"context":735},6,3,[853],{"name":854,"version":38,"knownCves":855},"dompdf",[],[857,883],{"entryPoint":858,"graph":859,"unsanitizedCount":29,"severity":882},"handleExportDownload (app\\helpers\\KCExportHelper.php:107)",{"nodes":860,"edges":878},[861,865,871,874],{"id":862,"type":863,"label":864,"file":518,"line":792},"n0","source","$_GET (x2)",{"id":866,"type":867,"label":868,"file":518,"line":869,"wp_function":870},"n1","sink","header() [Header Injection]",157,"header",{"id":872,"type":863,"label":873,"file":518,"line":792},"n2","$_GET",{"id":875,"type":867,"label":876,"file":518,"line":751,"wp_function":877},"n3","echo() [XSS]","echo",[879,881],{"from":862,"to":866,"sanitized":880},true,{"from":872,"to":875,"sanitized":880},"low",{"entryPoint":884,"graph":885,"unsanitizedCount":29,"severity":882},"\u003CKCExportHelper> (app\\helpers\\KCExportHelper.php:0)",{"nodes":886,"edges":891},[887,888,889,890],{"id":862,"type":863,"label":864,"file":518,"line":792},{"id":866,"type":867,"label":868,"file":518,"line":869,"wp_function":870},{"id":872,"type":863,"label":873,"file":518,"line":792},{"id":875,"type":867,"label":876,"file":518,"line":751,"wp_function":877},[892,893],{"from":862,"to":866,"sanitized":880},{"from":872,"to":875,"sanitized":880},{"summary":895,"deductions":896},"The static analysis of kivicare-clinic-management-system v4.2.0 shows a generally good security posture in terms of its current code, with no identified critical or high severity taint flows and a high percentage of SQL queries using prepared statements and output being properly escaped.  The attack surface appears minimal in terms of direct entry points like AJAX handlers, REST API routes, and shortcodes. However, the plugin's history of 13 known CVEs, including a critical and a high severity vulnerability, is a significant concern and indicates a pattern of past security weaknesses. The types of past vulnerabilities, such as SQL Injection, Authorization Bypass, and Cross-Site Scripting, suggest that the plugin has struggled with proper input sanitization and authorization enforcement in its development history. While the current version seems to have addressed immediate code-level risks, the historical context and the presence of a bundled library (dompdf) that could potentially be outdated or contain its own vulnerabilities warrant careful consideration.  The existence of cron events without explicit mention of authentication checks on their handlers also presents a potential, albeit unquantified, risk. Overall, the plugin exhibits strengths in its current coding practices but is significantly weakened by its past vulnerability record and the potential for undiscovered issues within bundled libraries or less scrutinized components like cron events.",[897,899,901,903,905],{"reason":898,"points":848},"History of 13 known CVEs",{"reason":900,"points":848},"Critical severity past CVE",{"reason":902,"points":247},"High severity past CVE",{"reason":904,"points":48},"Bundled library: dompdf",{"reason":906,"points":123},"Cron events without explicit auth check","2026-03-16T18:33:22.270Z",{"wat":909,"direct":924},{"assetPaths":910,"generatorPatterns":915,"scriptPaths":916,"versionParams":919},[911,912,913,914],"\u002Fwp-content\u002Fplugins\u002Fkivicare-clinic-management-system\u002Fassets\u002Fcss\u002Fkivicare-clinic-management-system-public.css","\u002Fwp-content\u002Fplugins\u002Fkivicare-clinic-management-system\u002Fassets\u002Fcss\u002Fkivicare-clinic-management-system-rtl.css","\u002Fwp-content\u002Fplugins\u002Fkivicare-clinic-management-system\u002Fassets\u002Fjs\u002Fkivicare-clinic-management-system-public.js","\u002Fwp-content\u002Fplugins\u002Fkivicare-clinic-management-system\u002Fassets\u002Fjs\u002Fkivicare-clinic-management-system-rtl.js",[],[917,918],"kivicare-clinic-management-system\u002Fassets\u002Fjs\u002Fkivicare-clinic-management-system-public.js","kivicare-clinic-management-system\u002Fassets\u002Fjs\u002Fkivicare-clinic-management-system-rtl.js",[920,921,922,923],"kivicare-clinic-management-system\u002Fassets\u002Fcss\u002Fkivicare-clinic-management-system-public.css?ver=","kivicare-clinic-management-system\u002Fassets\u002Fcss\u002Fkivicare-clinic-management-system-rtl.css?ver=","kivicare-clinic-management-system\u002Fassets\u002Fjs\u002Fkivicare-clinic-management-system-public.js?ver=","kivicare-clinic-management-system\u002Fassets\u002Fjs\u002Fkivicare-clinic-management-system-rtl.js?ver=",{"cssClasses":925,"htmlComments":932,"htmlAttributes":933,"restEndpoints":935,"jsGlobals":936,"shortcodeOutput":940},[926,927,928,929,930,931],"kivicare-clinic-management-system-wrapper","kivicare-appointments","kivicare-patient-registration","kivicare-doctor-profile","kivicare-dashboard","kivicare-booking",[],[934],"data-kivicare-modal",[],[937,938,939],"kiviCare_current_url","kiviCare_ajax_url","KIVICARE_NAMESPACE",[941,942,943,944],"[kivicare_booking]","[kivicare_patient_registration]","[kivicare_doctor_directory]","[kivicare_appointments]"]