Miraculous Core Plugin vulnerabilities

3 known vulnerabilities in Miraculous Core Plugin from Kamleshyadav. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Miraculous Core Plugin: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-32516Mar 25, 2026Kamleshyadav

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through < 2.1.2.

• 9.8 Critical severity

  Miraculous Core Plugin: Authorization Bypass Through User-Controlled Key

  CVE-2025-58627Nov 6, 2025Kamleshyadav

  Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.

• 9.8 Critical severity

  Miraculous Core Plugin: Incorrect Privilege Assignment

  CVE-2025-49388Aug 28, 2025KamleshyadavEPSS 6.6%

  Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through <= 2.0.7.