PatchTheCVEla-studioweb vulnerabilities
Recent CVEs affecting la-studioweb products. 6 tracked.
la-studioweb has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-05-30. Highest priority: CVE-2024-10873 (score 47/100).
- CVE-2025-4943 MEDIUM 6.4 UPGRADE The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
- CVE-2024-5349 HIGH 8.8 UPGRADE The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all vers
- CVE-2024-37479 HIGH 8.5 UPGRADE Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress
- CVE-2024-35725 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Stu
- CVE-2024-10873 HIGH 8.8 UPGRADE The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all vers
- CVE-2024-10787 MEDIUM 4.3 UPGRADE The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all vers
FAQ
How do I fix la-studioweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is la-studioweb being exploited right now?
None of the tracked la-studioweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which la-studioweb CVE should I patch first?
CVE-2024-10873 currently ranks highest (47/100): The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all vers.