CVE-2025-64211

MediumCVSS 5.3

Published: 29/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

The Masterstudy Elementor Widgets plugin by StylemixThemes has a missing authorization vulnerability, allowing access to functionality not properly constrained by ACLs. This issue affects versions up to and including 1.2.4.

Risk Assessment

An attacker may exploit normally inaccessible functions, potentially leading to unauthorized changes or information disclosure.

Recommendation

Update Masterstudy Elementor Widgets to a version newer than 1.2.4 where the vulnerability is fixed.

Other vulnerabilities in Masterstudy Elementor Widgets

CVE-2025-64210Medium
The Masterstudy Elementor Widgets plugin by StylemixThemes up to version 1.2.4 contains a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Attackers can exploit this to perform unauthorized actions.

Original NVD description (English source)

Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masterstudy Elementor Widgets: from n/a through <= 1.2.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS