Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-50884 EUVD-2023-55617GHSA-38hv-w5wp-prfp

WordPress LA-Studio Element Kit for Elementor plugin <= 1.1.5 - Broken Access Control vulnerability

Published Dec 9, 2024 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through <= 1.1.5.

Affected products

VendorProductAffectedFixed
LA-Studio LA-Studio Element Kit for Elementor ≤ 1.1.5 —

References