Approved changes feed: RSS · Atom

cpe:2.3:a:la-studio:la-studio_element_kit_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLa Studio (aa3f72d9-3b69-5c86-a85f-14ace0530a29)
ProductLa Studio Element Kit For Elementor (75fdf284-b297-53dd-a4b8-1deccf35c506)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65489 vulnerable 2026-07-29 01:06:20.075766 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.
Published: 2026-07-23T11:18:57.444Z
Updated: 2026-09-30T14:46:36.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65488 vulnerable 2026-07-29 01:06:20.075637 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
HIGH (7.1)
Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.
Published: 2026-07-23T11:18:56.816Z
Updated: 2026-09-30T14:46:55.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65482 vulnerable 2026-07-29 01:06:20.064946 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3.
Published: 2026-07-23T11:18:53.013Z
Updated: 2026-10-01T07:13:44.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24947 vulnerable 2026-06-08 07:53:18.745777 WordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through < 1.5.6.3.
Published: 2026-02-03T14:08:33.637Z
Updated: 2026-04-28T16:14:51.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32194 vulnerable 2026-06-08 07:18:59.295912 WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through <= 1.5.1.
Published: 2025-04-04T15:59:06.621Z
Updated: 2026-04-28T16:12:18.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47628 vulnerable 2026-06-08 06:48:12.966611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43210 vulnerable 2026-06-08 06:45:49.870241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37479 vulnerable 2026-06-08 06:39:47.672088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35725 vulnerable 2026-06-08 06:39:42.519641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50884 vulnerable 2026-06-08 06:16:16.942694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.