Vendor

    Moodle

    641 known vulnerabilities in products by Moodle, 0 of them actively exploited (CISA KEV).

    Key figures

    641

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    20

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Moodle
    SeverityCVETitleCVSSPublished
    CriticalCVE-2021-36393

    Moodle: SQL Injection

    		9.8
    CriticalCVE-2022-0332

    Moodle: SQL Injection

    		9.8
    HighCVE-2024-43425

    Moodle: remote code execution via calculated question types

    		8.1
    CriticalCVE-2017-2641

    Moodle 2.x and 3.x: SQL Injection

    		9.8
    CriticalCVE-2022-35649

    Moodle: Code Injection

    		9.8
    CriticalCVE-2021-36394

    Moodle: Session Fixation

    		9.8
    CriticalCVE-2021-21809

    Moodle: security vulnerability

    		8.2
    HighCVE-2018-1133

    Moodle 3.x: Remote Code Execution

    		8.8
    HighCVE-2020-14321

    Moodle: Incorrect Authorization

    		8.8
    CriticalCVE-2022-30600

    Moodle: Incorrect Calculation

    		9.8
    HighCVE-2022-35650

    Moodle: Path Traversal

    		7.5
    HighCVE-2025-34031

    Moodle LMS Jmol Plugin Path Traversal

    		7.5
    HighCVE-2026-26046

    Moodle: moodle: improper input sanitization in tex filter administration setting

    		7.2
    HighCVE-2018-14630

    Moodle: Improper Input Validation

    		8.8
    HighCVE-2016-9187

    Moodle: Unrestricted File Upload

    		8.8
    HighCVE-2016-9186

    Moodle: Unrestricted File Upload

    		8.8
    MediumCVE-2018-1042

    Moodle 3.x: Server-Side Request Forgery (SSRF)

    		6.5
    MediumCVE-2023-30943

    Moodle: tinymce loaders susceptible to arbitrary folder creation

    		6.5
    CriticalCVE-2021-3943

    Moodle: Improper Input Validation

    		9.8
    HighCVE-2020-10738

    Moodle: Improper Input Validation

    		7.5
    CriticalCVE-2022-40314

    Moodle: Remote Code Execution

    		9.8
    HighCVE-2018-16854

    Moodle: Cross-Site Request Forgery (CSRF)

    		6.5
    MediumCVE-2022-35653

    Moodle: Cross-site Scripting

    		6.1
    CriticalCVE-2023-5550

    Moodle: rce due to lfi risk in some misconfigured shared hosting environments

    		6.5
    HighCVE-2018-14631

    Moodle: Improper Input Validation

    		8.8

    All vulnerabilities in search

    Products

    Products by Moodle
    ProductCVEsActively exploited
    Moodle6370