CVE-2026-65489

MediumCVSS 5.3

Published: 23/07/2026(UTC)Updated: 30/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

Risk Assessment

Risk of unauthorized access to administrative functions or sensitive plugin data.

Recommendation

Update the LA-Studio Element Kit plugin to a version above 1.6.2.

Other vulnerabilities in LA-Studio Element Kit for Elementor

CVE-2026-65488High
Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio Element Kit for Elementor (lastudio-element-kit) allows Stored XSS. This issue affects versions from n/a through 1.6.2.

Original NVD description (English source)

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS