CVE-2025-8913 CRITICAL

CVE-2025-8913: WellChoose｜Organization Portal System - Local File Inclusion

Vendor Wellchoose
Product Organization Portal System
Weakness CWE-98 · PHP file inclusion
Published August 13, 2025
Last update August 13, 2025
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.

Key dates

02Disclosure timeline

August 13, 2025 CVE published
August 13, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-60055 WordPress Fabrica theme <= 1.8.1 - Local File Inclusion vulnerability CVE-2025-39476 WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability CVE-2024-3500 ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets CVE-2025-58949 WordPress Spock theme <= 1.17 - Local File Inclusion vulnerability CVE-2026-28129 WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability