CVE-2026-65488

The LA-Studio Element Kit for Elementor versions up to 1.6.2 are vulnerable to an unauthenticated Cross-Site Request Forgery (CSRF) attack, which could allow an attacker to perform unauthorized actions on behalf of users without their consent. This vulnerability poses a significant risk to website integrity and user data, making it crucial for developers and site administrators using this plugin to prioritize immediate updates or mitigations.