CVE Intelligence

Kamleshyadav Miraculous Core Plugin vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Kamleshyadav Miraculous Core Plugin: 3 record(s), with affected versions and fixes.

CVE-2026-32516 High · 8.5 CWE-89 Mar 25, 2026
WordPress Miraculous Core Plugin plugin < 2.1.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through < 2.1.2.
CVE-2025-58627 Critical · 9.8 CWE-639 Nov 6, 2025
WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.
CVE-2025-49388 Critical · 9.8 CWE-266 Aug 28, 2025
WordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation Vulnerability
Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through <= 2.0.7.