Skip to main content

Moodle 5.2.4

Unreleased Moodle Version
This version of Moodle has not yet been released.

Release date: 5 October 2026

Here is the full list of fixed issues in 5.2.4.

General fixes and improvements​

  • MDL-89870 - Install plugins page still offers installing from the plugins directory, which is no longer possible
  • MDL-89768 - Respect the Wiki createpage capability in the mobile app
  • MDL-88910 - filter_codehighlighter does not apply when rendered via JavaScript
  • MDL-88909 - markdown_to_html should format codeblocks to match filter_codehighlighter
  • MDL-89868 - Course index section links still point at the old positions after a section is moved
  • MDL-89820 - LTI 1.3 content-item selection modal is too small for tools with substantial configuration UIs
  • MDL-89726 - Dashboard-class React/ESM pages load many small un-bundled JavaScript module files (investigate bundling/HTTP2)
  • MDL-89692 - Calendar icon wraps onto its own line in date-time fields that have an "Enable" checkbox
  • MDL-89551 - tiny_media accepts URLs without protocol but then crashes
  • MDL-89434 - Fix multiple bugs in duration form element handling
  • MDL-89306 - Changing date field on registration page, redirects to frontpage
  • MDL-89295 - Assignment grades remain editable in workflow states unavailable to the grader
  • MDL-89267 - Restoring deleted question versions can split them across question bank entries
  • MDL-89250 - Section collapse-all toggle can get stuck showing "Collapse all" when a subsection is left expanded
  • MDL-88803 - Notification preferences do not show unconfigured message provider properly
  • MDL-87201 - Remove subsections from the recycle bin
  • MDL-81898 - The BigBlueButton plugin should provide set up recommendation when URL or secret is empty

Accessibility fixes and improvements​

  • MDL-89350 - The course management interface does not work well with long ID numbers on small screens

Security improvements​

  • MDL-89900 - Session timeout warning modal's own AJAX call for language strings extends the real session, so "Log in again" often does not redirect to login
  • MDL-89137 - Router exception stack trace exposes internal directory structure when debugging enabled

Security fixes​

A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.