Summary iPlain-English security verdict for Moodle, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.
Moodle's security status could not be assessed at the last sync — vulnerability data was unavailable.
Disclosure trend iNew CVEs published for Moodle each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.
Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.
No urgent unpatched issues identified. ✓
Get alerted about Moodle
Be emailed the moment Moodle gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.
We email only on real events for Moodle — no marketing, no sharing, and we never know what you run. Track your whole stack →
Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.
How long each Moodle release line is supported — and when it sunsets. Select a line for its full report.
Full Moodle end-of-life dates & support timeline →
5.2 latest 5.2.1 Supported until 2027-10-045.2.1 → 5.1 latest 5.1.5 Supported until 2027-04-195.1.5 → 5.0 latest 5.0.8 Supported until 2026-10-055.0.8 → 4.5 latest 4.5.12 Supported until 2027-10-044.5.12 → 4.4 latest 4.4.12 End of life ended 2025-12-084.4.12 → 4.3 latest 4.3.12 End of life ended 2025-04-214.3.12 → 4.2 latest 4.2.11 End of life ended 2024-10-074.2.11 → 4.1 latest 4.1.22 End of life ended 2025-12-084.1.22 → 4.0 latest 4.0.12 End of life ended 2023-11-134.0.12 → 3.11 latest 3.11.18 End of life ended 2023-11-133.11.18 → See all upcoming end-of-life dates →Frequently asked
Is Moodle safe and patched?
Moodle's security status could not be assessed at the last sync — vulnerability data was unavailable.
What should I do about Moodle now?
Upgrade Moodle to the latest supported release (5.2.1) or later and apply available security updates, then confirm against Moodle's official advisory.
When does Moodle reach end-of-life?
The latest supported Moodle release is 5.2.1. After end-of-life a release no longer receives security patches.
Which versions of Moodle are still receiving security updates?
Supported Moodle release lines (latest 5.2.1): 5.2, 5.1, 5.0, 4.5. End-of-life releases no longer receive security patches.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Moodle's official advisory before you patch or upgrade — Moodle official site ↗