Miraculous Core

Miraculous Core has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (33%). Other recurring categories include Incorrect Privilege Assignment, SQL Injection.

Every one of the 3 issues recorded for Miraculous Core has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by 0xd4rk5id3.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Miraculous Core vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-49388

Miraculous Core <= 2.0.7 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

3 records


2026-03-20 00:00	Miraculous Core < 2.1.2 - Authenticated (Subscriber+) SQL Injection Miraculous Core < 2.1.2	`CVE-2026-32516`	6.5 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2025-09-01 00:00	Miraculous Core < 2.0.9 - Unauthenticated Insecure Direct Object Reference Miraculous Core < 2.0.9	`CVE-2025-58627`	5.3 Medium	0xd4rk5id3	Yes
2025-08-21 00:00	Miraculous Core <= 2.0.7 - Unauthenticated Privilege Escalation Miraculous Core <= 2.0.7	`CVE-2025-49388`	9.8 Critical	0xd4rk5id3	Yes

Showing 1–3 of 3 reports