Missing Authorization in StylemixThemes MasterStudy LMS Pro
CVE-2025-64214

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
18 December 2025

What is CVE-2025-64214?

A missing authorization vulnerability exists in StylemixThemes MasterStudy LMS Pro, which allows unauthorized users to access functionalities not properly constrained by Access Control Lists (ACLs). This issue affects all versions prior to 4.7.16, potentially leading to unintended operations and data exposure. Users of this plugin need to review and update their systems to ensure proper authorization controls are in place to safeguard their applications.

Affected Version(s)

MasterStudy LMS Pro <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.
CVE-2025-64214 : Missing Authorization in StylemixThemes MasterStudy LMS Pro