Skip to main content

Moodle 5.0.3

Security Support Only Moodle Version
This version of Moodle receives security fixes, but is no longer supported for general bug fixes.
You may view the releases page to see the support status of all Moodle versions.

Release date: 6 October 2025

Here is the full list of fixed issues in 5.0.3.

General fixes and improvements​

  • MDL-58001 - Error uploading feedback file in assignment grader when grade type is set to "none"
  • MDL-85546 - MFA should not be triggered when using "Log in as"
  • MDL-84491 - Redis: session_set_save_handler should not be initialised every time
  • MDL-85018 - Duplicate quiz containing a multianswer question gives dml_missing_record_exception
  • MDL-86417 - Backup fails for legacy filter condition due to bug in annotate_set_reference_bank_entries
  • MDL-83256 - When a teacher exports participants list, it doesn't include custom profile fields
  • MDL-85869 - Ad-hoc task mod_qbank\task\transfer_question_categories fails with "Duplicate entry" error after upgrade to Moodle 5.0.1+
  • MDL-80447 - Use more restricted scope for Google OAuth app verification to comply with Google's access restriction requirements
  • MDL-86259 - Incomplete question category migration task leaves question bank unusable until manually fixed
  • MDL-86495 - Improve error handling for geoPlugin API now the service is no longer available for free use
  • MDL-86021 - Activities order in subsections inconsistent between Course page and Activities overview
  • MDL-73671 - Course Reset does not update the Forum "Due date" or "Cut-off date"
  • MDL-85766 - Random glossary entry block no longer displays "random" or "next" entries and shows error message on hiding
  • MDL-83991 - Tag related SQL queries are running very slow due to large amount of data in tag_instance table
  • MDL-86297 - Incomplete question bank list in selector when moving questions between banks
  • MDL-85684 - Assignment notifications contain poorly formatted assignment/course names
  • MDL-85652 - "Display throughout the entire site" in main menu block causes activities to be added to Home page
  • MDL-86330 - Courses appear in course overview block with a delay
  • MDL-85229 - URL description still displaying when "Display URL description" is unchecked
  • MDL-71786 - Course Reset does not update "Remind me to grade by" date on assignments
  • MDL-86177 - Asynchronous grade recalculations causes errors which break the grader frontend
  • MDL-86800 - Incorrect table borders appearing across Moodle
  • MDL-86725 - Grade report search box text not visible on iOS Mobile
  • MDL-86688 - Running an accessibility check on question bank causes errors
  • MDL-86667 - Usability issues in the site registration form
  • MDL-86604 - Table borders are incorrectly displayed in the feedback module
  • MDL-86548 - Table borders are incorrectly displayed in the glossary module
  • MDL-86531 - Fix table overflow in course overview page
  • MDL-86413 - Superfluous borders are displayed in the "User private backup" table
  • MDL-86392 - Superfluous borders are displayed in the file picker table
  • MDL-86294 - Document missing dboptions in config-dist.php
  • MDL-86173 - The "Grade" column should be displayed in the Activities overview page only when there are gradable activities
  • MDL-86162 - Inconsistent borders added to H5P content types/library pages
  • MDL-86015 - Assignment grading table advanced filters dropdown closes too early
  • MDL-85266 - Cannot remove bulk uploaded users from selected bulk user actions
  • MDL-84739 - Rubric creation icons are over sized and affect the layout
  • MDL-80611 - Help links get accidentally translated and become broken
  • MDL-72956 - Multiple concurrent feedback submissions cause an error
  • MDL-86174 - Canvas Credentials updates impact Moodle backpack "Include authentication details" setting (implement paid plan alert)

Accessibility improvements​

  • MDL-81455 - Welcome message on login should not replace contents of page header
  • MDL-72511 - Calendar arrows need aria-hidden="true"
  • MDL-86599 - The Submission status/Feedback tables do not have a caption in Assignment
  • MDL-86512 - Better convey the purpose of select checkboxes within the assignment submissions table
  • MDL-86511 - TinyMCE fails to insert a hyperlink from the insert a link modal when keyboard used to enter the link
  • MDL-86501 - ARIA label on icon element instead of anchor in date_time_selector
  • MDL-86499 - Table sort icons should be decorative
  • MDL-86498 - Empty links on the badge overview page
  • MDL-86490 - The icon in the \core\output\core_renderer::action_icon() should be decorative
  • MDL-86489 - The required icon on feedback questions should be marked as decorative
  • MDL-86488 - Accessibility issues on the \core\output\action_menu component when rendered as a kebab menu button
  • MDL-86479 - Accessibility issues on the course index options menu button
  • MDL-86202 - Inconsistent heading hierarchy (H1, H3, H2) in Lesson

Security improvements​

  • MDL-84504 - Enabling maintenance mode via CLI is not recorded in the config log

Security fixes​

  • MSA-25-0041 - Course access permissions are not properly checked in course_output_fragment_course_overview
  • MSA-25-0042 - Upgrade FPDI including security fix (upstream)
  • MSA-25-0043 - Quiz notifications sent to suspended course participants
  • MSA-25-0044 - External cohort search service method leaks system cohort data
  • MSA-25-0045 - When using router (r.php) it was possible for the server to show application directories
  • MSA-25-0046 - Router produces JSON instead of 404 error when passed a non-existent course ID
  • MSA-25-0047 - Possible to bypass MFA
  • MSA-25-0048 - Password brute force risk when mobile/web services enabled
  • MSA-25-0049 - Names of hidden groups are visible to users with access to create group calendar events
  • MSA-25-0050 - Possible to bypass timer in timed assignments