CVE-2025-63564

Description

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

Overview

State: PUBLISHED
Assigner (CNA): mitre
CVSS severity: —
CVSS score: —
CVSS vector: —
Effective score: no score available from CNA, NVD, or AI yet
CWE(s): —
Reserved: 2025-10-27
Published: 2026-09-23 00:00 UTC
Last updated: 2026-09-23 19:31 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/63xxx/CVE-2025-63564.json

AI-forensic CVSS estimate

Used only when a CVE has no official CVSS from its CNA or NVD. An LLM estimates the v3.1 base score from the description; a HIGH/CRITICAL estimate promotes the CVE to a Threat.

No AI estimate yet — it runs automatically once NVD has been checked, or click the button above.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2025-210998
Assigner: mitre
Published: Sep 23, 2026, 12:00:00 AM
Updated: Sep 23, 2026, 7:31:09 PM
EUVD base score (CVSS 3.1): 9.8 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EUVD-reported EPSS: 0.0000
Vendors: n/a
Products: n/a (n/a)
Aliases: GHSA-fhrw-qgv4-45hr

ENISA description: SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

EUVD references (2)

Affected products (1)

Vendor	Product	Versions	Platforms
n/a	n/a	`n/a` (affected)	—

Vendor references (2)

References embedded in the original CVE record by the assigning CNA.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

CVE-2025-63564 · Moodle · CVSS 9.8 · CVE Brief Analyst Report

web:cvebrief.com

CVE-2025-63564 9.8 Moodle · Socialwall plugin A SQL injection vulnerability in the Moodle Socialwall plugin (v3.0-v3.3) allows unauthenticated attackers to execute arbitrary code via crafted HTTP requests. Quick facts CVSS score 9.8 (Critical) Affected versions 3.0 through 3.3 First covered September 24, 2026 daily brief Last analyzed 2026-09-24

2026-09-24 15:40 UTC
CVE-2025-63564 - Moodle Socialwall Plugin SQL Injection Vulnerability

web:cvefeed.io

The following list is the news that have been mention CVE-2025-63564 vulnerability anywhere in the article. Results are limited to the first 20 news articles due to potential performance issues. The following table lists the changes that have been made to the CVE-2025-63564 vulnerability over time.

2026-09-24 15:40 UTC
CVE-2025-63564: Remote Code Execution | CVETodo

web:cvetodo.com

CVE-2025-63564 is a Remote Code Execution vulnerability. Full technical analysis, mitigations , and exploit status — updated in real time.

2026-09-24 15:40 UTC
Vim vulnerabilities CVE-2025-1215, CVE-2025-22134, CVE-2025-24014

web:my.f5.com

Security Advisory Description CVE - 2025 -1215 A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as ...

2026-09-24 15:40 UTC
CVE-2025-63564: n/a - Live Threat Intelligence - OffSeq.com

web:radar.offseq.com

Detailed information about CVE-2025-63564 : n/a. Get real-time updates, technical details, and mitigation strategies.

2026-09-24 15:40 UTC
CVE-2025-63564 - CVE-2025-63564 - SQL injection vulnerability in Moodle ...

web:www.enigma-global.com

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

2026-09-24 15:40 UTC
Oracle Critical Security Patch Update Advisory - June 2026

web:www.oracle.com

Prior Critical Patch Update and Critical Security Patch Update advisories should be reviewed for information regarding earlier published security patches. Refer to Critical Patch Updates, Critical Security Patch Updates, Security Alerts and Bulletins for information about Oracle Security advisories.

2026-09-24 15:40 UTC
CVE-2025-63564: SQL injection vulnerability in Moodle…

web:www.strix.ai

How severe is CVE-2025-63564 ? Severity scoring for CVE-2025-63564 is pending analysis. How do I fix CVE-2025-63564 ? Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

2026-09-24 15:40 UTC
CVE-2025-63564 | Tenable®

web:www.tenable.com

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

2026-09-24 15:40 UTC
CVE-2025-63564 — CRITICAL Vulnerability | CVSS 9.8 | ThreatClaw

web:www.threatclaw.ai

Patch or mitigate this CVE within 24 hours and verify exposure across all internet-facing and internally reachable instances. Is CVE-2025-63564 in the CISA Known Exploited Vulnerabilities catalog?

2026-09-24 15:40 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2025-63564.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-63564",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-23T19:30:43.427357Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-89",
                "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-23T19:31:09.139Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-23T16:13:32.259Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "http://moodle.com"
        },
        {
          "url": "https://medium.com/@lcrawfqrd/sqli-in-moodle-plugin-9f0ce4eb05f2"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2025-63564",
    "datePublished": "2026-09-23T00:00:00.000Z",
    "dateReserved": "2025-10-27T00:00:00.000Z",
    "dateUpdated": "2026-09-23T19:31:09.139Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}