CRITICAL 9.8 NVD

CVE-2025-63564

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

References

Published: 2026-09-23 · Source: NVD · Feed updated: 2026-09-23
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-23 via NVD.

Risk Timeline

CVE Disclosed2026-09-23 · -1 days ago

Remediation Resources

Analysis & PoC
moodle.com
Analysis & PoC
medium.com/@lcrawfqrd/sqli-in-moodle-plugin-9f0ce4eb05f2
vulnfeed aggregates 12908 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.