Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-58627 EUVD-2025-38142GHSA-62m2-79cv-f29w

WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability

Published Nov 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.

Affected products

VendorProductAffectedFixed
kamleshyadav Miraculous Core Plugin ≤ 2.0.9 —

References