Critical Vulnerability Discovered in Moodle's Socialwall Plugin

A vulnerability was discovered in Moodle, an open-source learning management system, as reported on 09 June 2026. The flaw allows an attacker to trigger an unspecified security issue, though the exact impact or exploitation method is not detailed by the vendor. The affected component is identified as the Socialwall plugin, which must be deactivated or uninstalled to mitigate the risk. No CVE identifier, specific versions, or additional technical details were provided in the notice. The advisory originates from France’s national cybersecurity agency (ANSSI) via its CERT-FR team.