Product by Open Source

    Moodle

    9 known vulnerabilities in Moodle (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Moodle (Open Source)
    HighCVE-2026-119553

    Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal

    also in 1 other product

    		6.5
    MediumCVE-2026-102588

    Moodle: csrf in xml grade import

    also in 1 other product

    		6.5
    MediumCVE-2026-119554

    Moodle: SQL Injection

    also in 1 other product

    		5.9
    MediumCVE-2026-119556

    Moodle: Missing Authorization

    also in 1 other product

    		4.3
    MediumCVE-2026-119555

    Moodle: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		4.3
    MediumCVE-2026-102586

    Moodle: xss via password reset link due to insufficient username escaping

    also in 1 other product

    		4.3
    MediumCVE-2026-102585

    Moodle: group validation missing when enrolling user to course

    also in 1 other product

    		4.3
    LowCVE-2026-102587

    Moodle: user list filters bypass profile field visibility

    also in 1 other product

    		2.7
    MediumCVE-2026-18025

    open source Moodle: security vulnerability

    		—

    All products by Open Source