CVE-2025-64210

MediumCVSS 5.4

Published: 29/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

6th percentile - higher than 6% of all known CVEs

Summary

The Masterstudy Elementor Widgets plugin by StylemixThemes up to version 1.2.4 contains a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Attackers can exploit this to perform unauthorized actions.

Risk Assessment

The risk involves potential unauthorized access to plugin functions, which could lead to content manipulation or privilege escalation within WordPress.

Recommendation

It is recommended to update the Masterstudy Elementor Widgets plugin to a version newer than 1.2.4 and review access control configurations.

Other vulnerabilities in Masterstudy Elementor Widgets

CVE-2025-64211Medium
The Masterstudy Elementor Widgets plugin by StylemixThemes has a missing authorization vulnerability, allowing access to functionality not properly constrained by ACLs. This issue affects versions up to and including 1.2.4.

Original NVD description (English source)

Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masterstudy Elementor Widgets: from n/a through <= 1.2.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS