Skip to contentLa-studio Element Kit For Elementor vulnerabilities
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2026-1030827.2 High
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerabilityCVE-2026-654895.3 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilityCVE-2026-654887.1 High
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-654826.5 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.6.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type' Widget SettingCVE-2026-153387.5 High
- la-studio element kit for elementor, unknown la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open RegistrationCVE-2026-122765.3 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerabilityCVE-2026-249474.3 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameterCVE-2026-0920Public exploit9.8 Critical
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCVE-2025-83606.4 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps WidgetsCVE-2025-49446.4 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link ParameterCVE-2025-49436.4 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents WidgetCVE-2025-31066.4 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-321946.5 Medium
- la-studio element kit for elementor, lastudio la-studio element kit for elementor +1 moreWordPress LA-Studio Element Kit for Elementor plugin <= 1.1.5 - Broken Access Control vulnerabilityCVE-2023-508846.5 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post DisclosureCVE-2024-107874.3 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File InclusionCVE-2024-108738.8 High
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-476286.5 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-432106.5 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerabilityCVE-2024-374798.5 High
- choijun la-studio element kit for elementor, la-studio element kit for elementor, choijun la studio element kit for elementor +2 moreLA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File InclusionCVE-2024-53498.8 High
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerabilityCVE-2024-357254.3 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterCVE-2024-44316.4 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author WidgetCVE-2024-30056.4 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-22496.4 Medium