Exposure of Moodle

LMS

70

exposure score

13,690

sites use

0

exploited

7

critical

CVEs

292 results

CVE-2024-38277MEDIUMmoodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keysEPSS 0.2%CVE-2023-5543LOWMoodle: duplicating a bigbluebutton activity assigns the same meeting idEPSS 0.2%CVE-2025-26532LOWTeachers can evade trusttext config when restoring glossary entriesEPSS 0.2%CVE-2025-62398MEDIUMMoodle: possible to bypass mfaEPSS 0.2%CVE-2025-62395MEDIUMMoodle: external cohort search service leaks system cohort dataEPSS 0.2%CVE-2025-62393MEDIUMMoodle: course access permissions not properly checked in course_output_fragment_course_overviewEPSS 0.2%CVE-2025-3634MEDIUMMoodle: moodle allows course self-enrolment before completing mfaEPSS 0.2%CVE-2025-62394MEDIUMMoodle: quiz notifications sent to suspended participantsEPSS 0.2%CVE-2025-62401MEDIUMMoodle: possible to bypass timer in timed assignmentsEPSS 0.2%CVE-2026-30884CRITICALmdjnelson/moodle-mod_customcert Vulnerable to Authorization Bypass Through User-Controlled KeyEPSS 0.2%CVE-2024-43428HIGHMoodle: cache poisoning via injection into storageEPSS 0.2%CVE-2025-3635LOWMoodle: csrf risk in moodle user tours manager allows tour duplicationEPSS 0.2%

← previouspage 15 / 15next →

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →