SQL Injection Vulnerability in Moodle Socialwall Plugin by Moodle
CVE-2025-63564

9.8CRITICAL

Key Information:

Vendor

Moodle
Status
Socialwall Plugin
Vendor
CVE Published:
23 September 2026

What is CVE-2025-63564?

The Moodle Socialwall plugin versions 3.0 through 3.3 contains a SQL injection vulnerability that enables attackers to execute arbitrary SQL queries via maliciously crafted HTTP requests. This flaw poses significant risks, potentially compromising sensitive data and allowing unauthorized access to the database. It is crucial for users of affected versions to apply security patches and implement best practices to mitigate risks associated with this vulnerability.

References

http://moodle.com
https://medium.com/@lcrawfqrd/sqli-in-moodle-plugin-9f0ce...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.