What’s Vulnerable › Products
choijun LA-Studio Element Kit for Elementor vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your choijun LA-Studio Element Kit for Elementor version is affected
Latest choijun LA-Studio Element Kit for Elementor vulnerabilities
- CVE-2026-103082 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2)
- CVE-2026-65489 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2026-65488 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability (CVSS 7.1)
- CVE-2026-65482 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-15338 — LA-Studio Element Kit for Elementor <= 1.6.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type' Widget Setting (CVSS 7.5)
- CVE-2026-24947 — WordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2026-0920 — LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter (CVSS 9.8)
- CVE-2025-8360 — LA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4)
- CVE-2025-4944 — LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets (CVSS 6.4)
- CVE-2025-4943 — LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter (CVSS 5.4)
- CVE-2025-3106 — LA-Studio Element Kit for Elementor <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widget (CVSS 6.4)
- CVE-2025-32194 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2024-10873 — LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion (CVSS 8.8)
- CVE-2024-47628 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2024-43210 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2024-37479 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability (CVSS 8.8)
- CVE-2024-5349 — LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion (CVSS 8.8)
- CVE-2024-35725 — WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability (CVSS 8.8)
- CVE-2024-4431 — LA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter (CVSS 6.4)
- CVE-2024-3005 — LA-Studio Element Kit for Elementor <= 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget (CVSS 6.4)