Known vulnerabilities in Moodle - page 5

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104026 - Improper Access Control
CVE-2025-26531
CWE-284 Medium
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104024 - Improper Access Control
CVE-2025-26532
CWE-284 Medium
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104021 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26528
CWE-79 Low
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26529
CWE-79 Low
Available
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU104019 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26530
CWE-79 Low
No
No
4.3.10, 4.4.6, 4.5.2 18.02.2025 SB2025021809
#VU101811 - Resource Management Errors
CVE-2024-55648
CWE-399 Medium
No
No
4.1.15, 4.3.9, 4.4.5, 4.5.1 17.12.2024 SB2024121718
SB2024121758
SB2024121772
#VU101810 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-55647
CWE-79 Low
No
No
4.3.9, 4.4.5, 4.5.1 17.12.2024 SB2024121718
SB2024121758
SB2024121772
#VU101809 - Improper Privilege Management
CVE-2024-55646
CWE-269 Low
No
No
4.1.15, 4.3.9, 4.4.5, 4.5.1 17.12.2024 SB2024121718
SB2024121758
SB2024121772
#VU101808 - Exposure of sensitive information to an unauthorized actor
CVE-2024-55645
CWE-200 Low
No
No
4.1.15, 4.3.9, 4.4.5, 4.5.1 17.12.2024 SB2024121718
SB2024121758
SB2024121772
#VU101807 - Improper Access Control
CVE-2024-55644
CWE-284 Low
No
No
4.1.15, 4.3.9, 4.4.5, 4.5.1 17.12.2024 SB2024121718
SB2024121758
SB2024121772
#VU101806 - Improper Access Control
CVE-2024-55643
CWE-284 Low
No
No
4.1.15, 4.3.9, 4.4.5, 4.5.1 17.12.2024 SB2024121718
SB2024121758
SB2024121772
#VU98545 - Improper Access Control
CVE-2024-48901
CWE-284 Low
No
No
4.1.14, 4.2.11, 4.3.8, 4.4.4 15.10.2024 SB2024101518
#VU98543 - Improper Access Control
CVE-2024-48900
CWE-284 Low
No
No
4.4.4 15.10.2024 SB2024101518
#VU98542 - Improper Access Control
CVE-2024-48899
CWE-284 Low
No
No
4.4.4 15.10.2024 SB2024101518
#VU98540 - Improper Access Control
CVE-2024-48898
CWE-284 Medium
No
No
4.1.14, 4.2.11, 4.3.8, 4.4.4 15.10.2024 SB2024101518
#VU98532 - Improper Access Control
CVE-2024-48897
CWE-284 Medium
No
No
4.1.14, 4.2.11, 4.3.8, 4.4.4 15.10.2024 SB2024101518
#VU98528 - Exposure of sensitive information to an unauthorized actor
CVE-2024-48896
CWE-200 Medium
No
No
4.1.14, 4.2.11, 4.3.8, 4.4.4 15.10.2024 SB2024101518
#VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38999
CWE-1321 High
No
No
4.1.16, 4.3.10, 4.4.6, 4.5.2 13.09.2024 SB2024091339
SB2024091626
SB20241015165
and 13 more
#VU97234 - Improper Authentication
CVE-2024-45691
CWE-287 Medium
No
No
4.1.13, 4.2.10, 4.3.7, 4.4.3 13.09.2024 SB2024091317
#VU97233 - Improper Access Control
CVE-2024-45690
CWE-284 Medium
No
No
4.1.13, 4.2.10, 4.3.7, 4.4.3 13.09.2024 SB2024091317


Showing elements 81 - 100 out of 605