This vulnerability in StylemixThemes Masterstudy Elementor Widgets (versions up to 1.2.4) is due to missing authorization checks, which allows unauthorized users to access certain functionality that should be protected by ACLs. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or official fix details are available from the vendor or other sources at this time.

The vulnerability allows unauthorized access to certain functions within the affected plugin, potentially enabling unauthorized modification or manipulation of data (integrity impact). There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin's functionality through other means such as web application firewalls or limiting plugin usage to trusted users only.