CVE-2025-63564
SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests
Published Sep 23, 2026 · updated Oct 14, 2026
SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests
Timeline
Detection, updates, and resolution for this record.
Sep 23, 2026 · NIST NVD
Detected
SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests
Oct 14, 2026 · NIST NVD
Updated
SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests
Sources
- CVE.orgCVE-2025-63564
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-63564
30-day exploitation probability 0.5%
first.org - NIST NVDCVE-2025-63564
SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests
nvd.nist.gov