PatchTheCVEwellchoose vulnerabilities
Recent CVEs affecting wellchoose products. 12 tracked.
wellchoose has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-01-26. Highest priority: CVE-2025-8913 (score 52/100).
- CVE-2026-1429 MEDIUM 5.4 UPGRADE Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allow
- CVE-2026-1428 HIGH 8.8 UPGRADE Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authen
- CVE-2026-1427 HIGH 8.8 UPGRADE Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authen
- CVE-2025-8914 MEDIUM 6.5 UPGRADE Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated
- CVE-2025-8913 CRITICAL 9.8 UPGRADE Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthen
- CVE-2025-8912 HIGH 7.5 UPGRADE Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unaut
- CVE-2025-8911 MEDIUM 6.1 UPGRADE Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowin
- CVE-2025-8910 MEDIUM 6.1 UPGRADE Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowin
- CVE-2025-8909 MEDIUM 6.5 UPGRADE Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remot
- CVE-2024-10202 HIGH 8.8 MITIGATE Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote at
- CVE-2024-10201 HIGH 8.8 MITIGATE Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remo
- CVE-2024-10200 HIGH 7.5 MITIGATE Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated
FAQ
How do I fix wellchoose vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wellchoose being exploited right now?
None of the tracked wellchoose CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wellchoose CVE should I patch first?
CVE-2025-8913 currently ranks highest (52/100): Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthen.