PHP Vulnerability Responses by Company

Moodle

Global cloud / infrastructure
Aliases / services
ムードル / Moodle LMS / Moodle Pty Ltd / Moodle
Official website
https://moodle.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Moodle LMS (self-hosted)

Response status
PHP update advised
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides a PHP learning management system.

Moodle HQ's PHP2SHELL notice urges self-hosted operators to apply PHP security patches immediately.

Scope: HQ-site restoration does not prove all self-hosted or MoodleCloud sites are patched.

What users should do

Contact the server administrator and install compatible patched PHP.

Official service URL

Source URLs

  1. https://moodle.org/mod/forum/discuss.php?d=482882#p1912177https://moodle.org/mod/forum/discuss.php?d=482882#p1912177Response evidence
  2. https://moodle.org/news/https://moodle.org/news/Response evidence
Related official sources
  1. Moodle PHP support policyOfficial information directory

Comments