Read the docs

WisdomGarden

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WisdomGarden records in CISA KEV

No WisdomGarden vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tronclass Ilearn 2 records LOW Tronclass 1 record LOW

Records

8 records

TI-2023-21953 CVE-2023-41356 · GHSA-gh2c-3f8j-9ph4

WisdomGarden Tronclass ilearn - Path Traversal

Priority LOW 31

NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01144 Published 2023-11-03 No fix listed CWE-22
TI-2024-06245 CVE-2024-6738 · GHSA-6phm-74mw-7r5r

WisdomGarden Tronclass - Broken Access Control

Priority LOW 30

The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00456 Published 2024-07-15 Fixed in 1.69.61976 CWE-284
TI-2026-73881 CVE-2026-110466 · GHSA-277v-q825-2xgx

Sensitive data exposure in WisdomGarden Tronclass

Priority LOW 24

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00318 Published 2026-10-14 No fix listed CWE-497
TI-2025-09813 CVE-2025-10719 · GHSA-gprp-wr29-xjm4

WisdomGarden｜Tronclass - Insecure Direct Object Reference

Priority LOW 24

Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to access other users' files.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2025-09-19 No fix listed CWE-639
Open these records in search →