CVE-2026-13764 | Stylemixmes Masterstudy Plugin up to 4.8.151 on WordPress AJAX Action masterstudy_ms_stm_set_discard_transient stm_developer_access_token privileges management

SecurityVulns
Yanac

A vulnerability has been found in Stylemixmes Masterstudy Plugin up to 4.8.151 on WordPress and classified as critical. This impacts the function masterstudy_ms_stm_set_discard_transient of the component AJAX Action. The manipulation of the argument stm_developer_access_token leads to improper privilege management.

This vulnerability is listed as CVE-2026-13764. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More