The vulnerability identified as CVE-2025-64215 in StylemixThemes MasterStudy LMS Pro is classified under CWE-862 (Missing Authorization). It allows unauthorized users to access functionality that should be restricted by ACLs, potentially leading to integrity and availability impacts. The affected versions are those prior to 4.7.16, although exact affected versions are not explicitly listed. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable without privileges or user interaction, with low attack complexity. The impact includes no confidentiality loss but includes integrity and availability impacts. No vendor advisory or patch information is currently available.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform actions or access functionality that should be restricted, potentially leading to integrity and availability issues within the affected LMS system. There is no confidentiality impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor for vendor updates and apply patches once available. Until then, consider restricting access to the affected system and reviewing ACL configurations where possible to limit exposure.