CVE-2025-64214: StylemixThemes MasterStudy LMS Pro, заобикаляне на

Описание

Оригинално описание

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MasterStudy LMS Pro: from n/a through < 4.7.16.

Засегнати продукти

• StylemixThemes MasterStudy LMS Pro: до 4.7.16

Вид слабост

• CWE-862 Missing Authorization

История

Други уязвимости в StylemixThemes MasterStudy LMS Pro

• 6.5CVE-2025-64215
• 6.5CVE-2026-8653
• 7.5CVE-2025-64213
• 5.4CVE-2025-64212
• 7.5CVE-2025-7438

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-64214
• https://nvd.nist.gov/vuln/detail/CVE-2025-64214
• https://patchstack.com/database/Wordpress/Plugin/masterstudy-lms-learning-management-system-pro/vulnerability/wordpress-masterstudy-lms-pro-plugin-4-7-16-arbitrary-content-deletion-vulnerability?_s_id=cve