Known Vulnerabilities for Moodle LMS by Moodle
Listed below are 6 of the newest known vulnerabilities associated with "Moodle LMS" by "Moodle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-54733 json | The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moo... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2025-60511 json | Moodle OpenAI Chat Block plugin 3.0.1 (2025021700) suffers from an Insecure Direct Object Reference (IDOR) vulnerability due ... | Not Provided | 2025-10-21 | 2026-07-05 |
| CVE-2024-37674 json | Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name ... | Not Provided | 2024-06-20 | 2026-07-09 |
| CVE-2022-50943 json | Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script... | Not Provided | 2026-05-10 | 2026-05-24 |
| CVE-2022-28986 json | LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (ID... | Not Provided | 2022-05-10 | 2026-07-09 |
| CVE-2020-1754 json | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capab... | Not Provided | 2022-08-05 | 2026-06-23 |