Known vulnerabilities in Moodle - page 3

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124634 - Insertion of Sensitive Information Into Sent Data
CVE-2025-67857
CWE-201 Medium
No
No
4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124633 - Improper Authorization
CVE-2025-67856
CWE-285 Medium
No
No
4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124632 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-67855
CWE-79 Low
No
No
4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124631 - Improper Access Control
CVE-2025-67854
CWE-284 Medium
No
No
4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124630 - Improper Restriction of Excessive Authentication Attempts
CVE-2025-67853
CWE-307 Medium
No
No
4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124629 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-67852
CWE-601 Medium
No
No
4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124628 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-67850
CWE-79 Low
No
No
4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124626 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-67849
CWE-79 Low
No
No
4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124625 - Improper Handling of Insufficient Permissions or Privileges
CVE-2025-67848
CWE-280 Medium
No
No
4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1 26.03.2026 SB2026032640
#VU124624 - Improper Authorization
CVE-2025-62401
CWE-285 Medium
No
No
4.1.21, 4.4.11, 4.5.7, 5.0.3 26.03.2026 SB2026032621
SB2026032622
SB2026032623
and 1 more
#VU124623 - Exposure of sensitive information to an unauthorized actor
CVE-2025-62400
CWE-200 Medium
No
No
4.1.21, 4.4.11, 4.5.7, 5.0.3 26.03.2026 SB2026032621
SB2026032622
SB2026032623
and 1 more
#VU124621 - Improper Restriction of Excessive Authentication Attempts
CVE-2025-62399
CWE-307 High
No
No
4.1.21, 4.4.11, 4.5.7, 5.0.3 26.03.2026 SB2026032621
SB2026032622
SB2026032623
and 1 more
#VU124455 - Improper Authentication
CVE-2025-62398
CWE-287 Medium
No
No
4.4.11, 4.5.7, 5.0.3 25.03.2026 SB2026032565
SB2026032621
SB2026032622
and 1 more
#VU124441 - Information Exposure Through an Error Message
CVE-2025-62397
CWE-209 Medium
No
No
5.0.3 25.03.2026 SB2026032565
SB2026032621
#VU124440 - Exposure of Information Through Directory Listing
CVE-2025-62396
CWE-548 Medium
No
No
4.5.7, 5.0.3 25.03.2026 SB2026032565
SB2026032621
SB2026032622
#VU124436 - Improper Access Control
CVE-2025-62395
CWE-284 Medium
No
No
4.1.21, 4.4.11, 4.5.7, 5.0.3 25.03.2026 SB2026032565
SB2026032621
SB2026032622
and 1 more
#VU124434 - Incorrect Authorization
CVE-2025-62394
CWE-863 Medium
No
No
4.5.7, 5.0.3 25.03.2026 SB2026032565
SB2026032621
SB2026032622
#VU124433 - Allocation of Resources Without Limits or Throttling
CVE-2025-54869
CWE-770
No
No
4.1.21, 4.4.11, 4.5.7, 5.0.3 25.03.2026 SB2026032565
#VU124432 - Improper Access Control
CVE-2025-62393
CWE-284 Medium
No
No
5.0.3 25.03.2026 SB2026032565
SB2026032621
#VU124428 - Cross-Site Request Forgery (CSRF)
CVE-2025-62435
CWE-352 Low
No
No
4.1.20, 4.4.10, 4.5.6, 5.0.2 25.03.2026 SB2026032563


Showing elements 41 - 60 out of 618