PT-2025-52165 · Stylemixthemes · Masterstudy Lms Pro

Rafie Muhammad · Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-64214

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MasterStudy LMS Pro versions prior to 4.7.16

Description A missing authorization flaw exists in StylemixThemes MasterStudy LMS Pro, allowing access to functionality that is not properly restricted by Access Control Lists (ACLs). This could allow unauthorized access to certain features within the learning management system.

Recommendations Update MasterStudy LMS Pro to version 4.7.16 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-64214

Affected Products

Masterstudy Lms Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-64214 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-lms-learning-management-system-pro/vulnerability/wordpress-masterstudy-lms-pro-plugin-4-7-16-arbitrary-content-deletion-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/masterstudy-lms-learning-management-system-pro/vulnerability/wordpress-masterstudy-lms-pro-plugin-4-7-16-arbitrary-content-deletion-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2001736590222045239 · Twitter Post