CVE-2026-30884: Authorization Bypass Through User-Controlled Key

mdjnelson/moodle-modcustomcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser. Prior to versions 4.4.9 and 5.0.3, a teacher who holds mod/customcert:manage in any single course can read and silently overwrite certificate elements...

CVE-2015-2270

Moodle is affected by CVE-2015-2270 via lib/moodlelib.php when the theme uses the blocks-regions feature. The issue is present in Moodle versions up to 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4. In these versions, the login-validation process establishes the course sta...