Known Vulnerabilities for products from Moodle
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Moodle".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102588 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102587 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102586 json | A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker t... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102585 json | A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not ver... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102584 json | A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculat... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102583 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102582 json | A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin w... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102581 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102580 json | A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Bu... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102579 json | A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access ... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102578 json | A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized inp... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102577 json | A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic ... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2024-37674 json | Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name ... | Not Provided | 2024-06-20 | 2026-07-09 |
| CVE-2023-46858 json | ** DISPUTED ** Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE:... | 5.4 - MEDIUM | 2023-10-29 | 2023-11-07 |
| CVE-2023-35133 json | An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects ... | 7.5 - HIGH | 2023-06-22 | 2023-11-07 |
| CVE-2023-35132 json | A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 t... | 6.3 - MEDIUM | 2023-06-22 | 2023-11-07 |
| CVE-2023-35131 json | Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 ... | 6.1 - MEDIUM | 2023-06-22 | 2023-11-07 |
| CVE-2023-30944 json | The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki metho... | 7.3 - HIGH | 2023-05-02 | 2023-11-07 |
| CVE-2023-30943 json | The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create ... | 5.3 - MEDIUM | 2023-05-02 | 2023-11-07 |
| CVE-2023-28336 json | Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not othe... | 4.3 - MEDIUM | 2023-03-23 | 2023-11-07 |
Known software with vulnerabilities from Moodle
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Moodle | Moodle | - |