A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access.