Advisories · Technology
choijun LA-Studio Element Kit for Elementor.
Every CVE that names choijun LA-Studio Element Kit for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
LA-Studio Element Kit for Elementor <= 1.6.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type' Widget Setting
- choijun LA-Studio Element Kit for Elementor
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+
LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter
- choijun LA-Studio Element Kit for Elementor
- Privilege escalation
- CVSS 6.4 Medium
LA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- choijun LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets
- choijun LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter
- choijun LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
LA-Studio Element Kit for Elementor <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widget
- choijun LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosure
- choijun LA-Studio Element Kit for Elementor
- Broken access control
- CVSS 8.8 High
LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
- choijun LA-Studio Element Kit for Elementor
- File inclusion
- CVSS 8.8 High
LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion
- choijun LA-Studio Element Kit for Elementor
- Path traversal
- CVSS 6.4 Medium
LA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
- choijun LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
LA-Studio Element Kit for Elementor <= 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget
- choijun LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
LA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- choijun LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)