Moodle vulnerabilitiesNone on the known-exploited list.
Moodle has 590 published vulnerabilities across 3 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Moodle, with 588. If you run Moodle software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Moodle products have the most vulnerabilities?
Moodle leads with 588 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Moodle vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Moodle's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Moodle flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 88%CVE-2024-43425High
A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types.
- 54%CVE-2022-35650High
The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions.
- 52%CVE-2021-36393Critical
In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.
- 44%CVE-2022-0332Critical
A flaw was found in Moodle in versions 3.11 to 3.11.4.
- 42%CVE-2013-3630Medium
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
- 31%CVE-2018-1133High
An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.
- 24%CVE-2021-21809Critical
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10.
- 22%CVE-2013-4341Medium
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted...
- 16%CVE-2018-1042Medium
Moodle 3.x has Server Side Request Forgery in the filepicker.
- 16%CVE-2020-14321High
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
All Moodle products we track.
2 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Moodlemoodle588 vulnerabilities465 versions
- Virtual Programming Labvirtual_programming_lab1 vulnerability1 version
This directory lists the 2 Moodle products with at least one tracked version, of 3 in our catalogue.
Running Moodle? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.
- Matched to
- Moodle on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 590 published vulnerabilities across 3 products and 466 versions from Moodle.
None of Moodle's vulnerabilities is on the list of flaws known to be exploited today.
Moodle, with 588 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Moodle products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.