m
moodle
Security Risk Profile
27
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 707 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 30, 2004 to present
707
Total CVEs
141
Critical+High
1
Exploited
23
Unpatched
Threat Assessment
Avg CVSS
5.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
23
Critical/High
Risk Level
27/100
low
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 31 in Last 30 Days
Severity Distribution
Critical
28High
113Medium
497Low
40Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
61Age Distribution
Common Weaknesses (CWE)
1
XSS
155
2
Infoleak
92
3
CSRF
42
4
SQL Injection
33
5
Input Validation
31
Most Affected Products
1. Moodle moodle8247
2. composer/moodle/moodle1238
3. Moodle Moodle552
4. redhat/moodle234
5. Fedoraproject Fedora155
Recent Vulnerabilities
See more →EOL-moodle-5.3
unknown
Oct 5, 2026
https://seclists.org/oss-sec/2026/q3/1016
unknown
Moodle LMS 3.9.2: authenticated file-upload validation bypass (CWE-434) leading to RCE under misconfiguration
Sep 30, 2026🔧 No Patch
CVE-2026-102586
CVSS 6.1medium
Moodle: xss via password reset link due to insufficient username escaping
Sep 29, 2026
CVE-2026-102583
CVSS 2.7low
Moodle: incorrect capability check in ai generate image web service
Sep 29, 2026
CVE-2026-102585
CVSS 4.3medium
Moodle: group validation missing when enrolling user to course
Sep 29, 2026
CVE-2026-102587
CVSS 2.7low
Moodle: user list filters bypass profile field visibility
Sep 29, 2026
CVE-2026-102588
CVSS 6.5medium
Moodle: csrf in xml grade import
Sep 29, 2026
REDHAT-BUG-2543639
CVSS 4.0medium
Sep 29, 2026🔧 No Patch
REDHAT-BUG-2543640
CVSS 1.0low
Sep 29, 2026🔧 No Patch
REDHAT-BUG-2543641
CVSS 4.0medium
Sep 29, 2026🔧 No Patch
Monitor moodle in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.