Lucene search
K

28 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 5:3 p.m.2 views

CVE-2026-32516

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through 2.1.2...

8.5CVSS5.9AI score0.00044EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.3 views

EUVD-2026-15876

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through 2.1.2...

5.9AI score0.00044EPSS
Exploits0References2
NVD
NVD
added 2026/03/25 5:17 p.m.3 views

CVE-2026-32516

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through 2.1.2...

8.5CVSS0.00044EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 4:15 p.m.21 views

CVE-2026-32516 WordPress Miraculous Core Plugin plugin < 2.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through 2.1.2...

8.5CVSS0.00044EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 4:15 p.m.5 views

CVE-2026-32516

CVE-2026-32516 affects the WordPress Miraculous Core Plugin (versions prior to 2.1.2). The issue is an SQL Injection vulnerability caused by improper neutralization of special elements in SQL commands, enabling Blind SQL Injection. The CVSSv3.1 vector is AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L with a...

8.5CVSS5.9AI score0.00044EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:15 p.m.1 views

CVE-2026-32516 WordPress Miraculous Core Plugin plugin < 2.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Blind SQL Injection.This issue affects Miraculous Core Plugin: from n/a through 2.1.2...

5.9AI score0.00044EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

WordPress plugin Miraculous Core Plugin SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.5CVSS5.9AI score0.00044EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.4 views

PT-2026-28030

Name of the Vulnerable Software and Affected Versions Miraculous Core Plugin versions prior to 2.1.2 Description The Miraculous Core Plugin contains a flaw due to improper neutralization of special elements within SQL commands, leading to a Blind SQL Injection condition. This allows for potential...

5.8AI score0.00044EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/03/20 3:30 p.m.4 views

WordPress Miraculous Core Plugin plugin < 2.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Miraculous Core Plugin versions 2.1.2...

8.5CVSS5.9AI score0.00044EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/07 5:33 p.m.2 views

CVE-2025-58627

Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through 2.0.9...

9.8CVSS7AI score0.00067EPSS
Exploits0References1
NVD
NVD
added 2025/11/06 4:15 p.m.2 views

CVE-2025-58627

Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through 2.0.9...

9.8CVSS0.00067EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:54 p.m.1 views

CVE-2025-58627 WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through 2.0.9...

9.8CVSS6.6AI score0.00067EPSS
Exploits0References1
CVE
CVE
added 2025/11/06 3:54 p.m.8 views

CVE-2025-58627

The CVE-2025-58627 issue affects WordPress Miraculous Core Plugin (miraculouscore) versions before 2.0.9. It is an Insecure Direct Object References (IDOR) vulnerability caused by a user-controllable key that enables an authorization bypass due to misconfigured access control. Affects Miraculous ...

9.8CVSS6.6AI score0.00067EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/06 3:54 p.m.2 views

EUVD-2025-38142

Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through 2.0.9...

6.5AI score0.00067EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/06 3:54 p.m.5 views

CVE-2025-58627 WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through 2.0.9...

9.8CVSS0.00067EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.3 views

PT-2025-45245

Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through 2.0.9...

7AI score0.00067EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.1 views

WordPress plugin Miraculous Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

9.8CVSS6.7AI score0.00067EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-26011

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00184EPSS
Exploits1References1
GithubExploit
GithubExploit
added 2025/09/05 10:34 a.m.264 views

Exploit for CVE-2025-49388

CVE-2025-49388 WordPress Miraculous Core Plugin Plugin OPTI...

9.8CVSS7AI score0.00184EPSS
Exploits1
Patchstack
Patchstack
added 2025/09/01 5:58 p.m.6 views

WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Miraculous Core Plugin versions 2.0.9...

9.8CVSS7AI score0.00067EPSS
Exploits0Affected Software1
Rows per page
Query Builder