M
Vendor security profile
moodle
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical0
CISA KEV0
Public exploit2
Patch rate%86
Avg. CVSS4.3
12-month vulnerability rate
0
0
0
0
0
0
1
0
0
0
12
0
CVE KEV
CVE severity distribution
14toplam CVE
Medium10 (71%)
Low4 (29%)
Patch and exploitation view
%86
Verified patch
%0
CISA KEV
%14
Public exploit
12Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.5
CVE-2026-102588
Moodle: csrf in xml grade import
F
Patch verifiedEPSS %0
2.7
CVE-2026-102587
Moodle: user list filters bypass profile field visibility
F
Patch verifiedEPSS %0
4.3
CVE-2026-102586
Moodle: xss via password reset link due to insufficient username escaping
F
Patch verifiedEPSS %0
4.3
CVE-2026-102585
Moodle: group validation missing when enrolling user to course
F
Patch verifiedEPSS %0
4.3
CVE-2026-102584
Moodle: missing capability check allows unauthorised grade penalty recalculation
F
Patch verifiedEPSS %0
2.7
CVE-2026-102583
Moodle: incorrect capability check in ai generate image web service
F
Patch verifiedEPSS %0
2.2
CVE-2026-102582
Moodle: manual enrolment page accessible when plugin disabled
F
Patch verifiedEPSS %0
4.6
CVE-2026-102581
Moodle: xss in forum post templates due to insufficient escaping
F
Patch verifiedEPSS %0
2.2
CVE-2026-102580
Moodle: arbitrary class instantiation via report builder audience classname
F
Patch verifiedEPSS %0
4.3
CVE-2026-102579
Moodle: user profile information disclosure via grade web service
F
Patch verifiedEPSS %0