la-studioweb records

7 published records for vendor la-studioweb.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 28.6%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
35Monitor	CVE-2024-10873No exploit	LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusionla-studioweb · element kit for elementor · CWE-98 RCE	High8.8	1.0%Nov 23, 2024
35Monitor	CVE-2024-5349No exploit	LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusionla-studioweb · element kit for elementor · CWE-22 RCE Path traversal	High8.8	0.9%Jul 2, 2024
35Monitor	CVE-2024-37479No exploit	WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerabilityla-studioweb · element kit for elementor · CWE-98	High8.8	0.4%Jul 2, 2024
35Monitor	CVE-2024-35725No exploit	WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerabilityla-studioweb · element kit for elementor · CWE-862 Broken access control (IDOR)	High8.8	0.3%Jun 10, 2024
21Monitor	CVE-2024-2249No exploit	LA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingla-studioweb · la-studio element kit for elementor · CWE-79 XSS	Medium5.4	0.3%Mar 14, 2024
21Monitor	CVE-2025-4943No exploit	LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameterla-studioweb · element kit for elementor · CWE-79 XSS	Medium5.4	0.2%May 30, 2025
17Monitor	CVE-2024-10787No exploit	LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosurela-studioweb · la-studio element kit for elementor · CWE-639 Broken access control (IDOR)	Medium4.3	0.3%Dec 4, 2024

CVE-2024-10873
35Monitor
LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
HighCVSS 8.8No exploitEPSS 1%
- RCE
la-studioweb · element kit for elementorNov 23, 2024
CVE-2024-5349
35Monitor
LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Path traversal
la-studioweb · element kit for elementorJul 2, 2024
CVE-2024-37479
35Monitor
WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability
HighCVSS 8.8No exploitEPSS 0%
la-studioweb · element kit for elementorJul 2, 2024
CVE-2024-35725
35Monitor
WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
la-studioweb · element kit for elementorJun 10, 2024
CVE-2024-2249
21Monitor
LA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
la-studioweb · la-studio element kit for elementorMar 14, 2024
CVE-2025-4943
21Monitor
LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter
MediumCVSS 5.4No exploitEPSS 0%
- XSS
la-studioweb · element kit for elementorMay 30, 2025
CVE-2024-10787
17Monitor
LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosure
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
la-studioweb · la-studio element kit for elementorDec 4, 2024