Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: WellChoose IFTOP IFTOP_P4_181 Clear all filters
TI-2026-03315 CVE-2026-3826 · GHSA-3fg9-xp5j-324m

WellChoose｜IFTOP - Local File Inclusion

Priority MEDIUM 49

IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00603 Published 2026-03-11 Fixed in IFTOP_P4_181 CWE-98
TI-2026-03314 CVE-2026-3825 · GHSA-q53h-jxcg-7r79

WellChoose｜IFTOP - Reflected Cross-site Scripting

Priority LOW 23

IFTOP developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00292 Published 2026-03-11 Fixed in IFTOP_P4_181 CWE-79
TI-2026-03313 CVE-2026-3824 · GHSA-9qp6-7gw6-mqp6

WellChoose｜IFTOP - Open redirect

Priority LOW 23

IFTOP developed by WellChoose has an Open redirect vulnerability, allowing authenticated remote attackers to craft a URL that tricks users into visiting malicious website.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00226 Published 2026-03-11 Fixed in IFTOP_P4_181 CWE-601