How can I convince the university to apply security upgrades to the online learning system? In my university, we've been using Moodle for many years (>5y). There was a general negative opinion on the Moodle for very different reasons, from "it's ugly" to "it's not up to date", going through "everyone thinks it's crap, me too". Since 2 years I've been pushing the staff to update it, and hopefully fix all the concerns raised by the student and staff using it; and more importantly, fix all security issues that have been patched in the 7 new versions. (We're using version 1.9, and the latest release is 2.8).

At the beginning of this year, a new staff responsible for coordinating the teaching, set up Google ClassRoom as a mean to fix the general issue that people were not happy with the Moodle. But leaving the security issue of the Moodle which is still used as Google ClassRoom doesn't provide everything Moodle provided.

Eventually, an administrative staff worked the estimates on how much it would cost to perform the upgrade, and everything is ready to be updated. We just need the permission of one or two people, who keep saying that it can wait, or that's not the priority, and security issues are not really an issue.

How can I convince people to update Moodle? Am I paranoid on the security issue?
How can you convince the higher authorities that security holes are a risk? Read up on the vulnerabilities and send them a list of concrete examples. No "an attacker could gain access to the database", but "someone could hack in and change all the passwords, and on the internet you can find a script to do this [link]". Your word may not carry much weight, so try to get the tech guys to sign it too.

Another option is to find a security expert at the CS department. They should be able to put a stronger, more authoritative word.

Of course, do not attack the server yourself, even if you don't change anything. That is more likely to upset people and backfire. But you could suggest the tech support to do it themselves as proof.