M
Vendor security profile
moodle
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
14toplam CVE
Uncertain14 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
6.5
CVE-2026-102588Moodle: csrf in xml grade import
Patch verifiedEPSS %0
2.7
CVE-2026-102587Moodle: user list filters bypass profile field visibility
Patch verifiedEPSS %0
4.3
CVE-2026-102586Moodle: xss via password reset link due to insufficient username escaping
Patch verifiedEPSS %0
4.3
CVE-2026-102585Moodle: group validation missing when enrolling user to course
Patch verifiedEPSS %0
4.3
2.7
CVE-2026-102583Moodle: incorrect capability check in ai generate image web service
Patch verifiedEPSS %0
2.2
CVE-2026-102582Moodle: manual enrolment page accessible when plugin disabled
Patch verifiedEPSS %0
4.6
CVE-2026-102581Moodle: xss in forum post templates due to insufficient escaping
Patch verifiedEPSS %0
2.2
4.3
CVE-2026-102579Moodle: user profile information disclosure via grade web service
Patch verifiedEPSS %0