CVE-2018-16970: Wisetail Learning Management System

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.

Affected products

• Wisetail Learning Management System: up to and including 4.11.6

Published 2018-09-12. Last modified 2026-06-17.