MO
Product
Moodle
637
CVEs
0
On KEV
10.0
Max CVSS
12
New 30D
Severity mix
Critical 20High 80Medium 247Low 11
Watch
Add Moodle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0333 | 3.8 | Jan 25 | A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions Affected: through 3.8.9; 3.9.0 before 3.9.12; 3.10.0 before 3.10.9; 3.11.0 before 3.11.5 |
| CVE-2024-43427 | 3.7 | Nov 11 | A flaw was found in moodle Affected: before 4.1.12; 4.2.0 before 4.2.9; 4.3.0 before 4.3.6; 4.4.0 before 4.4.2 |
| CVE-2019-10134 | 3.7 | Jun 26 | A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18 Affected: 3.1.0 through 3.1.17; 3.4.0 through 3.4.8; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2025-3635 | 3.5 | Apr 25 | A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request… Affected: before 4.1.18; 4.3.0 before 4.3.12; 4.4.0 before 4.4.8; 4.5.0 before 4.5.4 |
| CVE-2024-1439 | 3.3 | Feb 12 | Inadequate access control in Moodle LMS Affected: through 4.2.11 |
| CVE-2023-5543 | 3.3 | Nov 9 | When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity Affected: 4.0.0 before 4.0.11; 4.1.0 before 4.1.6; 4.2.0 before 4.2.3 |
| CVE-2023-5551 | 3.3 | Nov 9 | Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups Affected: before 3.9.24; 3.11.0 before 3.11.17; 4.0.0 before 4.0.11; 4.1.0 before 4.1.6; 4.2.0 before 4.2.3 |
| CVE-2025-3637 | 3.1 | Apr 25 | A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL Affected: before 4.3.12; 4.4.0 before 4.4.8; 4.5.0 before 4.5.4 |
| CVE-2026-102587 | 2.7 | Sep 30 | Moodle: user list filters bypass profile field visibility Affected: before 4.5.13; 5.0.0 before 5.0.9; 5.1.0 before 5.1.6; 5.2.0 before 5.2.2 |
| CVE-2026-102583 | 2.7 | Sep 30 | Moodle: incorrect capability check in ai generate image web service Affected: before 4.5.13; 5.0.0 before 5.0.9; 5.1.0 before 5.1.6; 5.2.0 before 5.2.2 |
| CVE-2012-1160 | 2.7 | Nov 14 | Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php Affected: before 2.2.2 |
Showing 11
The 500 most important CVEs for this product (exploited first, then by severity)