Moodle Gets Security Patches, Feature Improvements

Three updates have been released for the open source learning management system Moodle for the 2.3, 2.4, and 2.5 branches. The minor updates include security patches, bug fixes, and small functionality improvements.

Moodle is a free and open source learning management system in use at about 87,000 sites worldwide, including hundreds of K-12 schools, trade schools, colleges, and universities. Moodle used by about 1.3 million teachers and more than 73 million students participating in some 7.8 million courses as of this writing. (Updated statistics can be found on the Moodle Stats portal at Moodle HQ.)

The new updates include 2.5.2, 2.4.6, and 2.3.9. Each one addresses security vulnerabilities that have been discovered since the last update. The details of those vulnerabilities will be released in about a week to give administrators a chance to update their systems before the information is made public.

Other changes to versions 2.5.2 and 2.4.6 include:

  • Improvements to theme selector;
  • Fixes for MUC session cache;
  • iOS improvement for TinyMCE editor;
  • A fix for Gradebook that ensures grade items remain hidden regardless of activity state, if desired;
  • Support for editing question category information via the HTML editor;
  • A new form validation feature that points users to the location of the problem; and
  • The ability to delete comment without the need for confirmation.

Version 2.3.9 did not get those changes but did add a fix for the auto-linking filter, as did versions 2.5.2 and 2.4.6.

The Moodle 2.5.2, 2.4.6, and 2.3.9 updates are available now. Additional details can be found on moodle.org.

About the Author

David Nagel is the former editorial director of 1105 Media's Education Group and editor-in-chief of THE Journal, STEAM Universe, and Spaces4Learning. A 30-year publishing veteran, Nagel has led or contributed to dozens of technology, art, marketing, media, and business publications.

He can be reached at [email protected]. You can also connect with him on LinkedIn at https://www.linkedin.com/in/davidrnagel/ .


Featured

  • Man offers stem word sign on virtual screen

    Immersive Workforce Development Initiative Connects Students with Real-World STEM Careers

    The Center of Science and Industry, a science museum and research center in Central Ohio, has launched The HIVE, a workforce development initiative designed to help students across the country explore real-world career pathways in aerospace, advanced manufacturing, engineering, and emerging technologies.

  • digital lock with circuit patterns

    IBM Adds New AI-Powered Cybersecurity Tools

    IBM has unveiled an expanded portfolio of AI-powered cybersecurity products, positioning the company to compete more aggressively in a rapidly evolving market where enterprises are increasingly turning to artificial intelligence to defend against automated cyber threats.

  • businessman holding tablet with holographic AI icons

    Google Moving AI Agents into Mainstream Product Portfolio

    At its recent I/O developer conference, Google positioned artificial intelligence agents not as a distant research project, but as a product strategy spanning Search, personal assistants, productivity software, developer tools, and smart glasses.

  • glowing circuit patterns

    Call for Speakers Now Open for Tech Tactics in Education Fall 2026

    The virtual conference from the producers of Campus Technology and THE Journal will return on Sept. 23, 2026, with a focus on emerging trends in with a focus on emerging trends in AI, cybersecurity, and more.