Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Delete "graduated" students (GDPR) Locked	Alicia Wallace 24 Apr 2018	Randy Thornton 27 Apr 2018	1
	defining admin/mamager role for specific course Locked	altan ahmet 8 Mar 2019	altan ahmet 9 Mar 2019	1
	Define roles by IP address Locked	Tamar Alania 14 Sept 2018	Tamar Alania 14 Sept 2018	0
	Default setting shows email addresses of students Locked	Mary James 29 Sept 2009	Andreas Gounaris 17 Oct 2010	9
	Default Password policies: Self enrolment vs group enrolment Locked	Deleted user 14 June 2017	Deleted user 10 July 2017	3
	Default Account Settings / Hide email-adress Locked	Arne Petring 20 Mar 2011	Arne Petring 20 Mar 2011	0
	Deceptive site ahead - Phishing Locked	Nilesh Pathade 4 Oct 2018	Ken Task 5 Oct 2018	6
	Debian SSL Locked	LauriBeth Hull 15 Feb 2011	Deleted user 15 Feb 2011	1
	DDOS Protection Locked	Eric Katchan 18 Sept 2020	Eric Katchan 18 Sept 2020	0
	dbuser hash for password in config.php? Locked	J C 19 Sept 2011	Wissam Nahas 31 Aug 2016	4
	Dataroot permissions and contents changed... Locked	Aaron Batty 4 May 2014	Aaron Batty 4 May 2014	0
	dataroot directory access Locked	Richard Austin 25 Jan 2011	Lars-Olof Krause 25 Jan 2011	1
	dataprivacy tool blocking cron job from running Locked	stefan weber 24 Jan 2019	stefan weber 24 Jan 2019	0
	Database: Operating system used to Access Moodle Locked	Blaž Podobnik 20 Oct 2020	Ken Task 20 Oct 2020	1
	Database Encryption	Danish Jim 6 Mar 2024	Danish Jim 8 Mar 2024	2
	Database encryption Locked	Ted Long 18 Mar 2018	Mathew Gancarz 21 Mar 2018	1
	Database credentials can they be seen? Locked	Heather P 12 Feb 2016	Heather P 17 Feb 2016	4
	Database crashed Locked	Ahmed Belhani 27 Mar 2014	Ahmed Belhani 29 Mar 2014	3
	Database connection failed Locked	Safeen Shun 5 May 2020	koen roggemans 7 May 2020	9
	Data requests retention period Locked	Leon Erasmus 9 Nov 2018	Leon Erasmus 9 Nov 2018	2
	Data requests page invalid users Locked	Argjend Bytyqi 29 Apr 2021	Argjend Bytyqi 29 Apr 2021	1
	data request tasks failing Locked	Mark Kinoshita 12 Oct 2019	Mark Kinoshita 16 June 2020	10
	Data request download includes courses a user isn't enrolled on Locked	Mark Sharp 12 Feb 2020	Mark Sharp 12 Feb 2020	0
	Data registry and data deletion Locked	Tomasz Czernak 9 Oct 2018	Andrew Lyons 10 Oct 2018	1
	Data registry - Data Requests when not using it, and 'Subject Scope' Locked	Deleted user 30 May 2018	Deleted user 30 May 2018	0
	Data privacy plugin and quizzes Locked	Jonas Asa. 13 Sept 2018	Jonas Asa. 14 Sept 2018	3
	data privacy plugin 3.3.5 hanging in cron Locked	Tim Gildersleeve 9 May 2018	John Packiaraj 21 Nov 2018	11
	Data export and GDPR comliance Locked	Flotter Totte 25 Mar 2019	Flotter Totte 26 Mar 2019	3
	Data Deletion Request gives an error - Moodle 3.6.8 Locked	Dave Emsley 4 Feb 2020	Dave Emsley 14 Feb 2020	4
	data deletion for user context does not work	Jeremy Schulz 22 Feb 2024	Jeremy Schulz 27 Feb 2024	1
	Daniel Esterly - Is Moodle secure to use with Windows 10 Locked	Daniel Esterly 12 May 2017	John Okely 15 May 2017	1
	CVE-2021-44228 / log4j 0-day vulnerability Locked	Jennifer Volk 13 Dec 2021	Tim Hunt 14 Dec 2021	7
	CVE-2021-3943 Proof of Concept Locked	Lois R. McBee 22 Nov 2021	Andrew Lyons 6 Dec 2021	4
	CVE-2020-1692 Locked	callum Wood 28 Feb 2020	Tim Hunt 29 Feb 2020	1
	Customize user privacy - on user-level Locked	Marjan Milošević 24 July 2015	Devon Ritter 14 Apr 2016	1
	Custom site admin role	Pavel Dyachuk 25 Mar 2024	Helen Foster 28 Mar 2024	3
	Custom Css Locked	Deleted user 4 Oct 2011	Deleted user 4 Oct 2011	0
	Curl vulnerability	Howard Miller 9 Oct 2023	Ken Task 12 Oct 2023	3
	CSRF on moodle pages Locked	Naaman Fallouh 6 Sept 2015	Tim Hunt 7 Sept 2015	3
	CSP Locked	Martin Greenaway 17 June 2015	Martin Greenaway 23 Jan 2016	2
	Cross-Site Request Forgery (CSRF) in Moodle default pages - help Locked	Vincent Gullotta 21 Feb 2015	James McLean 25 Feb 2015	15
	Cross-Origin Read Blocking (CORB) Issue Locked	Niranjan eAbyas 3 Aug 2021	Niranjan eAbyas 3 Aug 2021	0
	Cross-Moodle Logins Locked	Mario Stylianou 21 June 2011	Hubert Chathi 21 June 2011	3
	Cross-domain CORS issue Locked	ben ftima wajdi 3 May 2022	jefry arch 10 May 2022	1
	cross domain ajax in script Locked	Bradley Botkin 12 Aug 2016	Bradley Botkin 17 Aug 2016	5
	cron url security Locked	H D 12 Feb 2015	Damyon Wiese 12 Feb 2015	1
	Cron reports fatal error while running mysqli_native_moodle_database.php Locked	Mudabbir S 30 June 2021	Mudabbir S 30 June 2021	0
	Cron job reports error "Convert 1 submission attempt(s) for assignment .... Conversion failed ... Locked	Mudabbir S 30 June 2021	Mudabbir S 30 June 2021	0
	cron job has never run Locked	Nestor Rodriguez 14 Sept 2021	Nestor Rodriguez 14 Sept 2021	0
	Critical: Keeping user data safe Locked	Olli Savolainen 10 Aug 2009	Olli Savolainen 10 Aug 2009	0
	Critical Security Warning - Guest role Locked	Michael Ko 2 July 2018	Emma Richardson 9 July 2018	2
	Critical error in "Authenticated user" role Locked	Roberto Catanuto 29 Mar 2022	Roberto Catanuto 30 May 2022	2
	Creating Static Student Emails Locked	Kester David 1 June 2010	Jon Witts 9 June 2010	3
	Creating Compulsory Agreements Locked	Moodle Officer 28 May 2010	Moodle Officer 25 June 2010	5
	Creating a non-gradeable student role - Audit. Locked	Jason Carson 27 June 2014	Jason Carson 27 June 2014	0
	Creating a Local Moodle Administrator Locked	Gregory Furtman 16 Feb 2011	Luis de Vasconcelos 16 Feb 2011	3
	Create User Locked	Gradus Kooistra 13 Feb 2009	Gradus Kooistra 13 Feb 2009	0
	Create only alpha / numerical usernames (Prevent symbols) Locked	Marie Waterhouse 3 Apr 2020	Marie Waterhouse 3 Apr 2020	0
	Create new User via Webservice Locked	Zadok Lindt 13 Feb 2018	Lê Tú 30 May 2018	6
	Create New User in DB Locked	Bar Geffen 21 Nov 2012	Bar Geffen 21 Nov 2012	0
	create an option to prevent xss injection ? Locked	Julien Boulen 1 June 2017	Marina Glancy 6 June 2017	1
	Create a moodle failover system Locked	Chris P. 6 Mar 2015	Chris P. 6 Mar 2015	2
	Courses for Teachers...... Enrol one by one by one Locked	Steve Audus 12 Sept 2013	Zeid Fanous 24 Sept 2013	18
	Course visibility Locked	Karen Atkinson 2 Oct 2013	Karen Atkinson 17 Oct 2013	3
	course not visible using custom role Locked	Rick Koontz 4 Nov 2011	Rick Koontz 4 Nov 2011	0
	course file access without login into moodle Locked	zizo zizo 24 Mar 2014	Richard Oelmann 27 Mar 2014	5
	Course editing by a non-creator Locked	John Kihoro 23 Apr 2009	Ray Lawrence 14 May 2009	4
	course data directories Locked	Bill Weinheimer 22 Nov 2009	Ger Tielemans 24 Nov 2009	2
	Course Creator change password access Locked	uk nites 23 Feb 2011	Darko Miletić 24 Feb 2011	1
	Course Creator Locked	mohamed hammam 13 Nov 2014	mohamed hammam 13 Nov 2014	0
	Course Category acess through LDAP Locked	Catherine Pinnell 23 July 2014	Catherine Pinnell 23 July 2014	0
	Course Categories Page Public Locked	Wolf Ventir 14 May 2019	Wolf Ventir 15 May 2019	4
	Country field on Self Register Locked	james ashton 29 July 2010	Iñaki Arenaza 20 Nov 2010	4
	Counter argument required Locked	Just H 19 Nov 2013	Marcus Green 19 Nov 2013	5
	Could not find or create directory Locked	umesh chavan 12 Feb 2011	umesh chavan 12 Feb 2011	0
	Could a quickly changing client IP upset the log in process? Locked	Visvanath Ratnaweera 22 Aug 2018	Visvanath Ratnaweera 24 Aug 2018	3
	CORS problem Locked	Ranadheer Mareboina 21 Mar 2023	Ranadheer Mareboina 21 Mar 2023	0
	Corrupted php files Locked	jlh 437 11 Feb 2009	jlh 437 19 June 2009	12
	Corrections to the Moodle landscape as a result of the Facebook's breaches Locked	Visvanath Ratnaweera 27 Mar 2018	Visvanath Ratnaweera 25 Oct 2019	9
	Cookie Consent Warning mandatory in Europe Locked	Rolf Cper 16 Dec 2014	Rolf Cper 18 Dec 2014	3
	Cookie Consent and Privacy Notice Popup Locked	Alan Christie 13 July 2018	Agnes Beleznai 13 Feb 2021	17
	Controlling what Guests see Locked	Alan Muscat 28 June 2011	Alan Muscat 28 June 2011	0
	contraseña Admin Locked	ivan artaza 9 Apr 2012	Guillermo Madero 10 Apr 2012	2
	CONTEXT_COURSE on web service Locked	Balaji Kutty 5 July 2011	Balaji Kutty 5 July 2011	0
	Content Security policy console error	PyaePhyo Hein22 9 Feb 2024	PyaePhyo Hein22 14 Feb 2024	2
	Content Security Policy (CSP) and inline scripts Locked	Stephen Hooley 9 Mar 2022	Luis de Vasconcelos 19 Oct 2022	6
	Content Security Policy Locked	Hal MacLean 4 Dec 2019	Hal MacLean 4 Dec 2019	0
	Content sanitizing? Locked	Ewout ter Haar 7 Apr 2020	Ewout ter Haar 7 Apr 2020	0
	content protection method Locked	dave lewis 26 Nov 2018	dave lewis 27 Nov 2018	2
	Content lockdown Locked	Kenneth Hess 21 Mar 2019	Jon Bolton 24 Mar 2019	6
	Contacts tab in messaging provides list of all users (GDPR issue?) Locked	Craig Hunter 20 Sept 2018	Gemma Lesterhuis 23 Oct 2018	8
	Contact Site Support - Ransomware Threat Locked	Deryck Walker 25 Jan 2023	Deryck Walker 27 Feb 2023	9
	Connect DB over SSL... Locked	Peter Eliyahu Kornfeld 9 Dec 2020	Peter Eliyahu Kornfeld 9 Dec 2020	0
	Confirmed Moodle + Solr is vulnerable to Log4Shell Locked	Michael Taggart 16 Dec 2021	Marcus Green 17 Dec 2021	2
	Configuring Moodle for HTTPS and Adding users manually Locked	Tracy Castleberry 3 Feb 2011	John Bonner 26 Apr 2011	4
	config.php-cron Locked	ivan breziansky 11 Aug 2009	ivan breziansky 13 Aug 2009	2
	config.php and .js files are hacked Locked	Jarek . 27 May 2010	Jarek . 28 May 2010	5
	Confidentiality policy for forum / posts sent Locked	Francis Vendrell 4 Apr 2019	Francis Vendrell 4 Apr 2019	0
	Concurrent Logins Locked	Rick Newton 29 Nov 2010	Rick Newton 29 Nov 2010	0
	Compromised Moodle Clean Up... Locked	Andy McCall 28 Apr 2010	Andy McCall 28 Apr 2010	3