CVE-2023-50884: WordPress LA-Studio Element Kit for Elementor plugin <= 1.1.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through <= 1.1.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50884?
CVE-2023-50884 has been classified as a missing authorization vulnerability, which can lead to unauthorized access if exploited.
How do I fix CVE-2023-50884?
To fix CVE-2023-50884, update the LA-Studio Element Kit for Elementor to a version later than 1.1.5.
What are the potential impacts of CVE-2023-50884?
The exploitation of CVE-2023-50884 could allow attackers to bypass access control and gain unauthorized access to sensitive functionalities.
Which versions are affected by CVE-2023-50884?
CVE-2023-50884 affects all versions of LA-Studio Element Kit for Elementor up to and including version 1.1.5.
Who is the vendor for CVE-2023-50884?
The vendor for CVE-2023-50884 is LA-Studio, which develops the Element Kit for Elementor plugin.