CVE Tools
Track your stack

Moodle-project

9 CVEs tracked since 2025. Since Feb 2025, none of them reached CISA KEV.

Moodle-project CVEs per month

Feb 2025 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Moodle-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0290
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1011 or fewer
2026-110

Products

The products that kept showing up in Moodle-project's monthly top three, with their CVEs summed over those months.

  1. Moodle91 month

Latest CVEs

The 13 most recently published vulnerabilities affecting Moodle-project.

  1. CVE-2026-119556Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems4.3
  2. CVE-2026-119555Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback4.3
  3. CVE-2026-119553Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal6.5
  4. CVE-2026-119554Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber5.9
  5. CVE-2025-26533SQL injection risk in course search module list filter8.1
  6. CVE-2025-26532Teachers can evade trusttext config when restoring glossary entries3.1
  7. CVE-2025-26531IDOR in badges allows disabling of arbitrary badges3.1
  8. CVE-2025-26530Reflected XSS via question bank filter8.3
  9. CVE-2025-26529Stored XSS risk in admin live log8.3
  10. CVE-2025-26528Stored XSS in ddimageortext question type3.4
  11. CVE-2025-26527Non-searchable tags can still be discovered on the tag search page and in the tags block5.3
  12. CVE-2025-26526Feedback response viewing and deletions did not respect Separate Groups mode6.5
  13. CVE-2025-26525Arbitrary file read risk through pdfTeX8.6

The record

Peak rank
#85 in Feb 2025
Busiest month shown
Feb 2025, 9 CVEs
Months with a KEV entry
0 since Feb 2025
Monthly snapshots
1 since 2025
Moodle-project's full record, month by month