We have detected a vulnerability in Moodle, a widely used platform for creating online academies and courses. This vulnerability affects versions prior to 4.5.9. If you use Moodle and haven't updated yet, we recommend you do so as soon as possible to protect your website. If the website was installed from SWPanel and you have automatic updates enabled, SWPanel can help you update it. Before doing so, make a backup in case something goes wrong.
What happened, explained simply
Moodle is a system used to create online academies, courses, and educational platforms. Like any software, security issues are occasionally discovered that can be exploited by malicious individuals. In this case, three errors (identified with the codes CVE-2026-26045, CVE-2026-26046, and CVE-2025-67849) have been found that could allow someone to access sensitive information or even alter the functioning of your website if not corrected. These errors are considered high severity (CVSS 7.3), meaning it's important to act as soon as possible.
Why it's important
If your website is not updated, someone could exploit these errors to access user data, such as emails or passwords, or even alter the content of your website. This doesn't mean it's already happening, but it's important to fix it to avoid future problems. Updating Moodle is a simple way to protect your website and your users' data.
Does it affect me?
This vulnerability affects all versions of Moodle prior to 4.5.9. If you're using an older version, your website could be exposed. To find out which version you have installed, you can check in the Moodle administration panel. If you're using SWPanel, you can also see if your website is affected in the Security section: there you'll see if we've detected the vulnerability on your website.
What SWPanel does
SWPanel automatically detects this vulnerability by analyzing your website from the Security section. If we detect it, we'll let you know so you can take action. In addition, if your website was installed from SWPanel and you have automatic updates enabled, SWPanel can help you update Moodle to version 4.5.9 or higher. Don't worry: before doing so, we'll always ask for your confirmation.
What you need to do
- Make a backup of your website. Before updating, it's important to save a copy of your website in case something goes wrong.
- Update Moodle to version 4.5.9 or higher. You can do this from the Moodle administration panel. If your website was installed from SWPanel and you have automatic updates enabled, SWPanel can do it for you.
- Check that your website works properly after the update. If you notice any errors or issues, revert to the backup you made before.
- Re-analyze your website in the SWPanel Security section. Once updated, your website should no longer appear as affected.
Frequently asked questions
Do I have to pay to update? No, the update is free. You just need to follow the steps we provide.
How do I know if I'm protected? Once you've updated to version 4.5.9 or higher, re-analyze your website in the SWPanel Security section. If it no longer appears as affected, it means you're protected.
What if I don't know how to update it? Don't worry. You can open a support ticket from SWPanel and our team will help you do it.
Can my website break after the update? It's possible, which is why we recommend making a backup before. If something goes wrong, you can always revert to the previous version.
Need help?
If you have questions or need help updating your website, you can open a support ticket from SWPanel. There, our team will help you resolve it quickly and easily. No additional service is required: support is included.
