Known vulnerabilities in Moodle - page 5

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107626 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-3641
CWE-94 Medium
No
No
4.1.18, 4.3.12, 4.4.8, 4.5.4 22.04.2025 SB2025042221
#VU107625 - Improper Access Control
CVE-2025-3640
CWE-284 Medium
No
No
4.1.18, 4.3.12, 4.4.8, 4.5.4 22.04.2025 SB2025042221
#VU107624 - Cross-Site Request Forgery (CSRF)
CVE-2025-3638
CWE-352 Low
No
No
4.1.18, 4.3.12, 4.4.8, 4.5.4 22.04.2025 SB2025042221
#VU107623 - Cross-Site Request Forgery (CSRF)
CVE-2025-3637
CWE-352 Low
No
No
4.1.18, 4.3.12, 4.4.8, 4.5.4 22.04.2025 SB2025042221
#VU107622 - Improper Access Control
CVE-2025-3636
CWE-284 Medium
No
No
4.1.18, 4.3.12, 4.4.8, 4.5.4 22.04.2025 SB2025042221
#VU107621 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3628
CWE-200 Medium
No
No
4.5.4 22.04.2025 SB2025042221
#VU107620 - Improper Authentication
CVE-2025-3634
CWE-287 Medium
No
No
4.3.12, 4.4.8, 4.5.4 22.04.2025 SB2025042221
#VU106079 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
4.1.17, 4.3.11, 4.4.7, 4.5.3 27.03.2025 SB2025032704
#VU106078 - Exposure of sensitive information to an unauthorized actor
CWE-200 High
No
No
4.5.3 27.03.2025 SB2025032704
#VU104030 - Exposure of sensitive information to an unauthorized actor
CVE-2025-26525
CWE-200 Medium
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104029 - Improper Access Control
CVE-2025-26526
CWE-284 Medium
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104028 - Exposure of sensitive information to an unauthorized actor
CVE-2025-26527
CWE-200 Medium
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104026 - Improper Access Control
CVE-2025-26531
CWE-284 Medium
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104024 - Improper Access Control
CVE-2025-26532
CWE-284 Medium
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104021 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26528
CWE-79 Low
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26529
CWE-79 Low
Available
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104019 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26530
CWE-79 Low
No
No
4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104018 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26533
CWE-89 High
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU101811 - Resource Management Errors
CVE-2024-55648
CWE-399 Medium
No
No
4.1.15, 4.3.9, 4.4.5, 4.5.1 17.12.2024 SB2024121718
SB2024121758
SB2024121772
#VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38999
CWE-1321 High
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 13.09.2024 SB2024091339
SB2024091626
SB20241015165
and 13 more


Showing elements 81 - 100 out of 618