Skip to content
OpenAdvisories
High · 8.5 CVE-2026-32516 EUVD-2026-15876GHSA-92g3-mxjw-p6mr

WordPress Miraculous Core Plugin plugin < 2.1.2 - SQL Injection vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through < 2.1.2.

Affected products

VendorProductAffectedFixed
kamleshyadav Miraculous Core Plugin ≤ < 2.1.2 —

References