Masterstudy Elementor Widgets Vulnerabilities

The Masterstudy Elementor Widgets plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.2.4. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.2.4

Fixed in:

1.2.5

Disclosed:

Oct 12, 2025

CVE-2025-64211 on NVD →

The Masterstudy Elementor Widgets plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 1.2.4

Fixed in:

1.2.5

Disclosed:

Oct 12, 2025

CVE-2025-64210 on NVD →

The Masterstudy Elementor Widgets plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.2.2

Fixed in:

1.2.3

Disclosed:

Jun 27, 2024

CVE-2024-37269 on NVD →