How many Moodle moodle/moodle CVEs are in CISA KEV?

None of Moodle moodle/moodle's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Moodle moodle/moodle are affected?

742 distinct Moodle moodle/moodle versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Moodle moodle/moodle CVEs?

Moodle moodle/moodle's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-863 (Incorrect Authorization), CWE-284 (Improper Access Control).

How many critical Moodle moodle/moodle vulnerabilities are there?

Moodle moodle/moodle has 21 critical and 71 high-severity CVEs.

What is the average severity of Moodle moodle/moodle CVEs?

The average CVSS base score across Moodle moodle/moodle's scored CVEs is 5.7.

Moodle moodle/moodle Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Moodle moodle/moodle has 436 published CVE records since 2006, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 19 have a known public exploit. The average CVSS base score across scored CVEs is 5.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Moodle moodle/moodle, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Moodle moodle/moodle's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical21

High71

Medium312

Low32

In CISA’s Known Exploited Vulnerabilities catalog

None of Moodle moodle/moodle's CVEs are currently listed in CISA's KEV catalog.

Public exploits

19 of Moodle moodle/moodle's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Moodle moodle/moodle version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.7.0 <= v < 2.7.315 CVEs
< 4.1.1214 CVEs
2.6.0 <= v < 2.6.614 CVEs
4.3.0 <= v < 4.3.414 CVEs
4.5.0-beta <= v < 4.5.414 CVEs
4.3.0-beta <= v < 4.3.1213 CVEs
4.4.0-beta <= v < 4.4.813 CVEs
< 3.9.811 CVEs
< 4.1.1011 CVEs
3.10.0-beta <= v < 3.10.511 CVEs
3.11.0-beta <= v < 3.11.111 CVEs

Frequently asked questions

Common questions about Moodle moodle/moodle vulnerabilities.

How many CVEs does Moodle moodle/moodle have?: Moodle moodle/moodle has 436 published CVE records since 2006.
How many Moodle moodle/moodle CVEs are in CISA KEV?: None of Moodle moodle/moodle's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Moodle moodle/moodle vulnerabilities?: Yes — 19 of Moodle moodle/moodle's CVEs have a known public exploit.
Which versions of Moodle moodle/moodle are affected?: 742 distinct Moodle moodle/moodle versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Moodle moodle/moodle CVEs?: Moodle moodle/moodle's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-863 (Incorrect Authorization), CWE-284 (Improper Access Control).
How many critical Moodle moodle/moodle vulnerabilities are there?: Moodle moodle/moodle has 21 critical and 71 high-severity CVEs.
What is the average severity of Moodle moodle/moodle CVEs?: The average CVSS base score across Moodle moodle/moodle's scored CVEs is 5.7.

Moodle moodle/moodle Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Common weakness types

Disclosure activity by year

Other Moodle products

Frequently asked questions

References

Track Moodle moodle/moodle vulnerabilities

Fixed in