Masterstudy Elementor Widgets CVE-2025-64211
MEDIUMSeverity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Unauthenticated network exploitation of a missing authorization check; impact is limited to partial integrity with no confidentiality or availability consequence.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionCVE.org
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masterstudy Elementor Widgets: from n/a through <= 1.2.4.
AnalysisAI
Missing authorization in the Masterstudy Elementor Widgets WordPress plugin (versions through 1.2.4) allows unauthenticated remote attackers to access ACL-restricted functionality, resulting in unauthorized integrity impact. The CVSS vector (PR:N, AV:N, AC:L) confirms network-accessible exploitation without credentials, though impact is constrained to limited write operations (I:L) with no confidentiality or availability consequence. No public exploit has been identified at time of analysis, and EPSS probability is extremely low at 0.04% (11th percentile), indicating minimal observed exploitation activity.
Technical ContextAI
CWE-862 (Missing Authorization) describes a failure to perform or correctly enforce an authorization check when a principal attempts to access a resource or perform an action. In WordPress plugin architecture, this typically manifests as REST API endpoints, AJAX handlers, or shortcode callbacks that execute privileged operations without verifying the requesting user's capability or nonce. Masterstudy Elementor Widgets is developed by StylemixThemes and integrates with the Elementor page builder to deliver LMS (Learning Management System) widget functionality - course listings, instructor profiles, and related educational UI components. The vulnerability allows external actors to invoke protected plugin functionality that should be gated behind WordPress role-based capability checks (e.g., manage_options, edit_posts). No CPE string was provided in the source data; the affected software is identified as the masterstudy-elementor-widgets WordPress plugin, versions n/a through 1.2.4.
Affected ProductsAI
The Masterstudy Elementor Widgets plugin by StylemixThemes for WordPress is affected in all versions from the initial release through and including version 1.2.4. No CPE string was included in the source data. The Patchstack advisory documenting this vulnerability is available at https://patchstack.com/database/Wordpress/Plugin/masterstudy-elementor-widgets/vulnerability/wordpress-masterstudy-elementor-widgets-plugin-1-2-4-broken-access-control-vulnerability-2?_s_id=cve and should be consulted for any additional version clarification provided by the vendor.
RemediationAI
Update the Masterstudy Elementor Widgets plugin to a version beyond 1.2.4. No exact patched release version is independently confirmed from available input data - consult the Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/masterstudy-elementor-widgets/vulnerability/wordpress-masterstudy-elementor-widgets-plugin-1-2-4-broken-access-control-vulnerability-2?_s_id=cve and the WordPress plugin repository for the current release. As a compensating control prior to patching, administrators can temporarily deactivate the plugin to eliminate the attack surface entirely, though this will disable all Masterstudy Elementor widget functionality. Alternatively, a web application firewall rule restricting access to the specific plugin endpoint(s) identified in the Patchstack report can limit exposure without disabling the plugin, though this requires knowing the exact affected endpoint and may block legitimate users if misconfigured.
More in Wordpress Plugin
View allThe Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
The Hash Form - Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil
Authentication bypass in the LiteSpeed Cache WordPress plugin (versions prior to 6.5.0.1) allows unauthenticated remote
The Simple File List plugin for WordPress through version 4.2.2 contains an unauthenticated remote code execution vulner
The SureTriggers WordPress plugin through version 1.0.82 contains a privilege escalation vulnerability that allows unaut
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via
The Business Directory Plugin - Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based
SQL injection in the NotificationX WordPress plugin (versions up to and including 2.8.2) allows unauthenticated remote a
The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i
The MasterStudy LMS WordPress Plugin - for Online Courses and Education plugin for WordPress is vulnerable to union base
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in
Remote code execution in the WP Query Console WordPress plugin (versions up to and including 1.0) by Ajit Bohra allows u
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today