LA-Studio Element Kit for Elementor Vulnerable to Missing Authorization
CVE-2024-35725
8.8HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 10 June 2024
What is CVE-2024-35725?
A missing authorization vulnerability exists in the LA-Studio Element Kit for Elementor, affecting versions from n/a through 1.3.6. This vulnerability allows unauthorized users to potentially access and modify sensitive functionalities within the plugin, which could lead to unauthorized changes to the website's design and functionality. Website administrators using affected versions are advised to implement necessary patches and updates to mitigate the risk associated with this vulnerability.
Affected Version(s)
LA-Studio Element Kit for Elementor <= 1.3.6