Authorization Bypass in Miraculous Core Plugin by kamleshyadav

CVE-2025-58627

What is CVE-2025-58627?

The Miraculous Core Plugin developed by kamleshyadav contains a vulnerability that allows unauthorized access due to incorrectly configured access control security levels. This weakness can be exploited by an attacker to bypass intended security measures, allowing them to access sensitive information or functionalities that should be restricted. It is crucial for users of versions prior to 2.0.9 to address this flaw to ensure the security of their WordPress installations.

References