All packages
LA-Studio Element Kit for Elementor vulnerabilities
3 known CVE vulnerabilities in LA-Studio Element Kit for Elementor, translated and rated.
- CVE-2026-65489Medium
The LA-Studio Element Kit for Elementor plugin versions up to 1.6.2 contain an unauthenticated broken access control vulnerability. An attacker without authentication can bypass access control mechanisms.
- CVE-2026-65488High
The LA-Studio Element Kit for Elementor plugin version 1.6.2 and earlier has an unauthenticated Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker can trick an administrator into performing unwanted actions.
- CVE-2026-65482Medium
The LA-Studio Element Kit for Elementor plugin versions up to 1.6.2 contain a contributor Cross Site Scripting (XSS) vulnerability. An attacker with contributor privileges can inject malicious script.