Advisories · Technology

iqonicdesign Graphina – Charts and Graphs For Elementor.

Every CVE that names iqonicdesign Graphina – Charts and Graphs For Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110291 CVE record

CVSS 7.2 High

Graphina <= 3.1.13 - Unauthenticated Stored Cross-Site Scripting via Tree Chart Widget Settings
- iqonicdesign Graphina – Charts and Graphs For Elementor
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2026
CVE-2026-13709 CVE record

CVSS 6.4 Medium

Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting
- iqonicdesign Graphina – Charts and Graphs For Elementor
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2026
CVE-2025-11820 CVE record

CVSS 6.4 Medium

Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets
- iqonicdesign Graphina – Charts and Graphs For Elementor
- Cross-site scripting (XSS)
Not analysed yet 5 Nov 2025
CVE-2025-8867 CVE record

CVSS 6.4 Medium

Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- iqonicdesign Graphina – Charts and Graphs For Elementor
- Cross-site scripting (XSS)
Not analysed yet 15 Aug 2025
CVE-2024-4574 CVE record

CVSS 6.4 Medium

Graphina – Elementor Charts and Graphs <= 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- iqonicdesign Graphina – Charts and Graphs For Elementor
- Cross-site scripting (XSS)
Not analysed yet 10 May 2024