PT-2025-52163 · Stylemixthemes · Masterstudy

Rafie Muhammad · Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-64209

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions StylemixThemes Masterstudy versions prior to 4.8.122

Description A missing authorization issue exists in StylemixThemes Masterstudy. This allows access to functionality that is not properly restricted by Access Control Lists (ACLs).

Recommendations Update to version 4.8.122 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-64209

Affected Products

Masterstudy

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-64209 · Security Note
• https://twitter.com/CVEnew/status/2001736592352739344 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/masterstudy/vulnerability/wordpress-masterstudy-theme-4-8-122-broken-access-control-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Theme/masterstudy/vulnerability/wordpress-masterstudy-theme-4-8-122-broken-access-control-vulnerability?_s_id=cve · Note