La-studio vulnerabilities

Products

• Element Kit For Elementor 24

Newest

• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-103082 7.2 HighOctober 1, 2026
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability CVE-2026-65489 5.3 MediumJuly 23, 2026
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability CVE-2026-65488 7.1 HighJuly 23, 2026
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-65482 6.5 MediumJuly 23, 2026
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.6.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type' Widget Setting CVE-2026-15338 7.5 HighJuly 11, 2026
• la-studio element kit for elementor, unknown la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open Registration CVE-2026-12276 5.3 MediumJuly 10, 2026
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerability CVE-2026-24947 4.3 MediumFebruary 3, 2026
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter CVE-2026-0920 Public exploit 9.8 CriticalJanuary 22, 2026
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2025-8360 6.4 MediumSeptember 6, 2025
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets CVE-2025-4944 6.4 MediumMay 30, 2025
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter CVE-2025-4943 6.4 MediumMay 30, 2025
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widget CVE-2025-3106 6.4 MediumApril 18, 2025
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-32194 6.5 MediumApril 4, 2025
• la-studio element kit for elementor, lastudio la-studio element kit for elementor +1 more WordPress LA-Studio Element Kit for Elementor plugin <= 1.1.5 - Broken Access Control vulnerability CVE-2023-50884 6.5 MediumDecember 9, 2024
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosure CVE-2024-10787 4.3 MediumDecember 4, 2024
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion CVE-2024-10873 8.8 HighNovember 23, 2024
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-47628 6.5 MediumOctober 5, 2024
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-43210 6.5 MediumAugust 12, 2024
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability CVE-2024-37479 8.5 HighJuly 2, 2024
• choijun la-studio element kit for elementor, la-studio element kit for elementor, choijun la studio element kit for elementor +2 more LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion CVE-2024-5349 8.8 HighJuly 2, 2024
• la-studio element kit for elementor WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability CVE-2024-35725 4.3 MediumJune 10, 2024
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CVE-2024-4431 6.4 MediumMay 23, 2024
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget CVE-2024-3005 6.4 MediumMay 2, 2024
• choijun la-studio element kit for elementor, la-studio element kit for elementor +1 more LA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2249 6.4 MediumMarch 14, 2024