WordPress plugin
Edwiser Bridge – WordPress Moodle Integration security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High0
- Medium6
- Low0
All Edwiser Bridge – WordPress Moodle Integration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Exposure ≤4.3.4No patch available | CVE-2026-39729 | |
| Medium4.3 | Missing Authorization ≤4.3.2Update to 4.3.3 | CVE-2026-24570 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.0.8Update to 3.1.0 | CVE-2025-24593 | |
| Medium6.4 | Authenticated (Subscriber+) Server-Side Request Forgery ≤3.0.7Update to 3.0.8 | CVE-2024-49312 | |
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤3.0.7Update to 3.0.8 | CVE-2024-49311 | |
| Critical9.8 | Authentication Bypass due to Missing Empty Value Check ≤3.0.5Update to 3.0.6 | CVE-2024-4186 | |
| Critical9.1 | Authenticated (Administrator+) SQL Injection ≤3.0.2Update to 3.0.4 | CVE-2024-31260 | |
| Medium4.3 | Cross-Site Request Forgery Bypass ≤2.0.6Update to 2.0.7 | CVE-2021-4399 |
- Medium5.3Unauthenticated Information Exposure
≤4.3.4No patch available
- Medium4.3Missing Authorization
≤4.3.2Update to 4.3.3
- Medium6.1Reflected Cross-Site Scripting
≤3.0.8Update to 3.1.0
- Medium6.4Authenticated (Subscriber+) Server-Side Request Forgery
≤3.0.7Update to 3.0.8
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤3.0.7Update to 3.0.8
- Critical9.8Authentication Bypass due to Missing Empty Value Check
≤3.0.5Update to 3.0.6
- Critical9.1Authenticated (Administrator+) SQL Injection
≤3.0.2Update to 3.0.4
- Medium4.3Cross-Site Request Forgery Bypass
≤2.0.6Update to 2.0.7
Edwiser Bridge – WordPress Moodle Integration: common questions
Does Edwiser Bridge – WordPress Moodle Integration have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Edwiser Bridge – WordPress Moodle Integration: 2 critical, 6 medium. At least one is not fixed in the latest version.
How do I check which version of Edwiser Bridge – WordPress Moodle Integration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Edwiser Bridge – WordPress Moodle Integration vulnerability?
CVE-2026-39729, published Oct 5, 2026: Edwiser Bridge – WordPress Moodle Integration <= 4.3.4 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Edwiser Bridge – WordPress Moodle Integration vulnerability listed in CISA KEV?
No. None of the known Edwiser Bridge – WordPress Moodle Integration vulnerabilities is currently listed in the CISA KEV catalog.