Skip to content
OpenAdvisories
High · 7.5 CVE-2025-64364 EUVD-2025-37329GHSA-7547-xpx7-423p

WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability

Published Oct 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Masterstudy masterstudy allows PHP Local File Inclusion.This issue affects Masterstudy: from n/a through < 4.8.126.

Affected products

VendorProductAffectedFixed
StylemixThemes Masterstudy ≤ 4.8.126 —

References