Skip to main content

Moodle 4.5.7

Security Support Only Moodle Version
This version of Moodle receives security fixes, but is no longer supported for general bug fixes.
You may view the releases page to see the support status of all Moodle versions.

Release date: 6 October 2025

Here is the full list of fixed issues in 4.5.7.

General fixes and improvements​

  • MDL-58001 - Error uploading feedback file in assignment grader when grade type is set to "none"
  • MDL-85546 - MFA should not be triggered when using "Log in as"
  • MDL-84491 - Redis: session_set_save_handler should not be initialised every time
  • MDL-85018 - Duplicate quiz containing a multianswer question gives dml_missing_record_exception
  • MDL-83256 - When a teacher exports participants list, it doesn't include custom profile fields
  • MDL-80447 - Use more restricted scope for Google OAuth app verification to comply with Google's access restriction requirements
  • MDL-85166 - Question category move does not update questionscontextid in question_set_references, breaking backup/restore
  • MDL-86495 - Improve error handling for geoPlugin API now the service is no longer available for free use
  • MDL-73671 - Course Reset does not update the Forum "Due date" or "Cut-off date"
  • MDL-83991 - Tag related SQL queries are running very slow due to large amount of data in tag_instance table
  • MDL-85684 - Assignment notifications contain poorly formatted assignment/course names
  • MDL-86330 - Courses appear in course overview block with a delay
  • MDL-85229 - URL description still displaying when "Display URL description" is unchecked
  • MDL-84815 - Checkboxes missing in add users to a group search options
  • MDL-71786 - Course Reset does not update "Remind me to grade by" date on assignments
  • MDL-86667 - Usability issues in the site registration form
  • MDL-86294 - Document missing dboptions in config-dist.php
  • MDL-85266 - Cannot remove bulk uploaded users from selected bulk user actions
  • MDL-84739 - Rubric creation icons are over sized and affect the layout
  • MDL-80611 - Help links get accidentally translated and become broken
  • MDL-72956 - Multiple concurrent feedback submissions cause an error
  • MDL-86174 - Canvas Credentials updates impact Moodle backpack "Include authentication details" setting (implement paid plan alert)

Accessibility improvements​

  • MDL-81455 - Welcome message on login should not replace contents of page header
  • MDL-72511 - Calendar arrows need aria-hidden="true"
  • MDL-86599 - The Submission status/Feedback tables do not have a caption in Assignment
  • MDL-86512 - Better convey the purpose of select checkboxes within the assignment submissions table
  • MDL-86511 - TinyMCE fails to insert a hyperlink from the insert a link modal when keyboard used to enter the link
  • MDL-86501 - ARIA label on icon element instead of anchor in date_time_selector
  • MDL-86499 - Table sort icons should be decorative
  • MDL-86498 - Empty links on the badge overview page
  • MDL-86490 - The icon in the \core\output\core_renderer::action_icon() should be decorative
  • MDL-86489 - The required icon on feedback questions should be marked as decorative
  • MDL-86488 - Accessibility issues on the \core\output\action_menu component when rendered as a kebab menu button
  • MDL-86479 - Accessibility issues on the course index options menu button
  • MDL-86202 - Inconsistent heading hierarchy (H1, H3, H2) in Lesson

Security improvements​

  • MDL-84504 - Enabling maintenance mode via CLI is not recorded in the config log

Security fixes​

  • MSA-25-0042 - Upgrade FPDI including security fix (upstream)
  • MSA-25-0043 - Quiz notifications sent to suspended course participants
  • MSA-25-0044 - External cohort search service method leaks system cohort data
  • MSA-25-0045 - When using router (r.php) it was possible for the server to show application directories
  • MSA-25-0047 - Possible to bypass MFA
  • MSA-25-0048 - Password brute force risk when mobile/web services enabled
  • MSA-25-0049 - Names of hidden groups are visible to users with access to create group calendar events
  • MSA-25-0050 - Possible to bypass timer in timed assignments