Security Advisory

CVE-2025-58627

9.8
CRITICAL

Vulnerability Description

Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.
Published Date November 6, 2025
Official Source NIST NVD Advisory