CVE-2025-49388

Severity

CRITICAL

CVSS

9.8

EPSS

0.05383

Risk score

41.08

CISA KEV

PoC

Published

2025-08-28

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2025-26011, GHSA-7HCG-H92Q-PJ2J

Products

kamleshyadav:Miraculous Core Plugin 0 ≤2.0.7

Sources

euvd EUVD-2025-26011

Description

Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through <= 2.0.7.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-26011
https://patchstack.com/database/Wordpress/Plugin/miraculouscore/vulnerability/wordpress-miraculous-core-plugin-plugin-2-0-7-privilege-escalation-vulnerability?_s_id=cve