Moodle Gets Security Patches, Feature Improvements

Three updates have been released for the open source learning management system Moodle for the 2.3, 2.4, and 2.5 branches. The minor updates include security patches, bug fixes, and small functionality improvements.

Moodle is a free and open source learning management system in use at about 87,000 sites worldwide, including hundreds of K-12 schools, trade schools, colleges, and universities. Moodle used by about 1.3 million teachers and more than 73 million students participating in some 7.8 million courses as of this writing. (Updated statistics can be found on the Moodle Stats portal at Moodle HQ.)

The new updates include 2.5.2, 2.4.6, and 2.3.9. Each one addresses security vulnerabilities that have been discovered since the last update. The details of those vulnerabilities will be released in about a week to give administrators a chance to update their systems before the information is made public.

Other changes to versions 2.5.2 and 2.4.6 include:

  • Improvements to theme selector;
  • Fixes for MUC session cache;
  • iOS improvement for TinyMCE editor;
  • A fix for Gradebook that ensures grade items remain hidden regardless of activity state, if desired;
  • Support for editing question category information via the HTML editor;
  • A new form validation feature that points users to the location of the problem; and
  • The ability to delete comment without the need for confirmation.

Version 2.3.9 did not get those changes but did add a fix for the auto-linking filter, as did versions 2.5.2 and 2.4.6.

The Moodle 2.5.2, 2.4.6, and 2.3.9 updates are available now. Additional details can be found on moodle.org.

About the Author

David Nagel is the former editorial director of 1105 Media's Education Group and editor-in-chief of THE Journal, STEAM Universe, and Spaces4Learning. A 30-year publishing veteran, Nagel has led or contributed to dozens of technology, art, marketing, media, and business publications.

He can be reached at [email protected]. You can also connect with him on LinkedIn at https://www.linkedin.com/in/davidrnagel/ .


Featured

  • large cloud icon with abstract code  and interconnected polygons

    Report: Enterprise AI Workloads Are Tipping Toward Private Cloud

    Broadcom's 2026 Private Coud Outlook report says enterprise AI is moving from experimentation into production, with private cloud emerging as the preferred deployment environment for AI inference among surveyed organizations.

  • digital brain integrating legal regulation and security interface

    Survey: Agentic AI Moves from Pilot Phase to Production, Bringing Governance to the Forefront

    A new report from Caylent, an AI-focused Amazon Web Services Premier Tier Services Partner, found that enterprises are already moving agentic AI beyond pilots and into production environments. At the same time, organizations are putting strict conditions around autonomy, making governance and control the next major challenge for enterprise AI adoption.

  • Young Woman Programmer Uses Laptop To Analyze Neural Network Models

    AI Leaders Warn of Risks at United Nations Security Council Briefing

    The heads of OpenAI, Anthropic, and Hugging Face recently joined AI researcher Yoshua Bengio at the United Nations headquarters in New York to warn the UN Security Council about the security risks of increasingly capable AI.

  • abstract smartphone translucent screen displaying AI interface

    Apple Unveils Redesigned Siri AI

    At its recent Worldwide Developers Conference, Apple announced Siri AI, a redesigned version of its voice assistant that Apple describes in its own announcement as "a profoundly more capable and personal assistant." The update is intended to make Siri more conversational, more context-aware, and more useful across iPhone, iPad, Mac, Apple Watch, and Vision Pro.