WellChoose records
15 published records for vendor wellchoose.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 5
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')2
- CWE-36 Absolute Path Traversal2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
15 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2025-8913No exploit | WellChoose｜Organization Portal System - Local File Inclusionwellchoose · organization portal system · CWE-98 | Critical9.3 | — | 0.6% | Aug 13, 2025 |
37Monitor | CVE-2026-3826No exploit | WellChoose｜IFTOP - Local File Inclusionwellchoose · organization portal system · CWE-98 | Critical9.3 | — | 0.5% | Mar 11, 2026 |
35Monitor | CVE-2024-10202No exploit | Wellchoose Administrative Management System - OS Command Injectionwellchoose · administrative management system · CWE-78 | High8.8 | — | 1.0% | Oct 21, 2024 |
35Monitor | CVE-2024-10201No exploit | Wellchoose Administrative Management System - Arbitrary File Uploadwellchoose · administrative management system · CWE-434 | High8.8 | — | 0.6% | Oct 21, 2024 |
34Monitor | CVE-2026-1427No exploit | WellChoose｜Single Sign-On Portal System - OS Command Injectionwellchoose · single sign-on portal system · CWE-78 | High8.7 | — | 1.4% | Jan 26, 2026 |
34Monitor | CVE-2026-1428No exploit | WellChoose｜Single Sign-On Portal System - OS Command Injectionwellchoose · single sign-on portal system · CWE-78 | High8.7 | — | 1.3% | Jan 26, 2026 |
34Monitor | CVE-2025-8912No exploit | WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversalwellchoose · organization portal system · CWE-36 | High8.7 | — | 0.5% | Aug 13, 2025 |
30Monitor | CVE-2024-10200No exploit | Wellchoose Administrative Management System - Arbitrary File Read through Path Traversalwellchoose · administrative management system · CWE-23 | High7.5 | — | 0.7% | Oct 21, 2024 |
28Monitor | CVE-2025-8909No exploit | WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversalwellchoose · organization portal system · CWE-36 | High7.1 | — | 0.6% | Aug 13, 2025 |
28Monitor | CVE-2025-8914No exploit | WellChoose｜Organization Portal System - SQL Injectionwellchoose · organization portal system · CWE-89 | High7.1 | — | 0.3% | Aug 13, 2025 |
21Monitor | CVE-2025-8911No exploit | WellChoose｜Organization Portal System - Reflected Cross-site Scriptingwellchoose · organization portal system · CWE-79 | Medium5.3 | — | 0.3% | Aug 13, 2025 |
21Monitor | CVE-2025-8910No exploit | WellChoose｜Organization Portal System - Reflected Cross-site Scriptingwellchoose · organization portal system · CWE-79 | Medium5.3 | — | 0.3% | Aug 13, 2025 |
20Monitor | CVE-2026-3825No exploit | WellChoose｜IFTOP - Reflected Cross-site Scriptingwellchoose · organization portal system · CWE-79 | Medium5.1 | — | 0.2% | Mar 11, 2026 |
20Monitor | CVE-2026-3824No exploit | WellChoose｜IFTOP - Open redirectwellchoose · organization portal system · CWE-601 | Medium5.1 | — | 0.2% | Mar 11, 2026 |
19Monitor | CVE-2026-1429No exploit | WellChoose｜Single Sign-On Portal System - Reflected Cross-site Scriptingwellchoose · single sign-on portal system · CWE-79 | Medium4.8 | — | 0.2% | Jan 26, 2026 |
- CVE-2025-891337Monitor
WellChoose｜Organization Portal System - Local File Inclusion
CriticalCVSS 9.3No exploitEPSS 0%wellchoose · organization portal systemAug 13, 2025
- CVE-2026-382637Monitor
WellChoose｜IFTOP - Local File Inclusion
CriticalCVSS 9.3No exploitEPSS 0%wellchoose · organization portal systemMar 11, 2026
- CVE-2024-1020235Monitor
Wellchoose Administrative Management System - OS Command Injection
HighCVSS 8.8No exploitEPSS 1%wellchoose · administrative management systemOct 21, 2024
- CVE-2024-1020135Monitor
Wellchoose Administrative Management System - Arbitrary File Upload
HighCVSS 8.8No exploitEPSS 0%wellchoose · administrative management systemOct 21, 2024
- CVE-2026-142734Monitor
WellChoose｜Single Sign-On Portal System - OS Command Injection
HighCVSS 8.7No exploitEPSS 1%wellchoose · single sign-on portal systemJan 26, 2026
- CVE-2026-142834Monitor
WellChoose｜Single Sign-On Portal System - OS Command Injection
HighCVSS 8.7No exploitEPSS 1%wellchoose · single sign-on portal systemJan 26, 2026
- CVE-2025-891234Monitor
WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal
HighCVSS 8.7No exploitEPSS 0%wellchoose · organization portal systemAug 13, 2025
- CVE-2024-1020030Monitor
Wellchoose Administrative Management System - Arbitrary File Read through Path Traversal
HighCVSS 7.5No exploitEPSS 0%wellchoose · administrative management systemOct 21, 2024
- CVE-2025-890928Monitor
WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal
HighCVSS 7.1No exploitEPSS 0%wellchoose · organization portal systemAug 13, 2025
- CVE-2025-891428Monitor
WellChoose｜Organization Portal System - SQL Injection
HighCVSS 7.1No exploitEPSS 0%wellchoose · organization portal systemAug 13, 2025
- CVE-2025-891121Monitor
WellChoose｜Organization Portal System - Reflected Cross-site Scripting
MediumCVSS 5.3No exploitEPSS 0%wellchoose · organization portal systemAug 13, 2025
- CVE-2025-891021Monitor
WellChoose｜Organization Portal System - Reflected Cross-site Scripting
MediumCVSS 5.3No exploitEPSS 0%wellchoose · organization portal systemAug 13, 2025
- CVE-2026-382520Monitor
WellChoose｜IFTOP - Reflected Cross-site Scripting
MediumCVSS 5.1No exploitEPSS 0%wellchoose · organization portal systemMar 11, 2026
- CVE-2026-382420Monitor
WellChoose｜IFTOP - Open redirect
MediumCVSS 5.1No exploitEPSS 0%wellchoose · organization portal systemMar 11, 2026
- CVE-2026-142919Monitor
WellChoose｜Single Sign-On Portal System - Reflected Cross-site Scripting
MediumCVSS 4.8No exploitEPSS 0%wellchoose · single sign-on portal systemJan 26, 2026