<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: choijun-la-studio-element-kit-for-elementor</title><description>Every new CVE for choijun-la-studio-element-kit-for-elementor.</description><link>https://agentprime.io/</link><item><title>CVE-2026-15338: LA-Studio Element Kit for Elementor &lt;= 1.6.1 - Authenticated (Contributor+) Local File Inclusion via &apos;progress_type&apos; Widget Setting</title><link>https://agentprime.io/advisories/CVE-2026-15338/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15338/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Jul 2026 02:31:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-0920: LA-Studio Element Kit for Elementor &lt;= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter</title><link>https://agentprime.io/advisories/CVE-2026-0920/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-0920/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Jan 2026 06:47:19 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-8360: LA-Studio Element Kit for Elementor &lt;= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets</title><link>https://agentprime.io/advisories/CVE-2025-8360/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8360/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 06 Sep 2025 02:24:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4944: LA-Studio Element Kit for Elementor &lt;= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets</title><link>https://agentprime.io/advisories/CVE-2025-4944/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4944/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 May 2025 11:15:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4943: LA-Studio Element Kit for Elementor &lt;= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter</title><link>https://agentprime.io/advisories/CVE-2025-4943/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4943/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 May 2025 06:42:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3106: LA-Studio Element Kit for Elementor &lt;= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widget</title><link>https://agentprime.io/advisories/CVE-2025-3106/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3106/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Apr 2025 09:21:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10787: LA-Studio Element Kit for Elementor &lt;= 1.4.4 - Authenticated (Contributor+) Post Disclosure</title><link>https://agentprime.io/advisories/CVE-2024-10787/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10787/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Dec 2024 08:22:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10873: LA-Studio Element Kit for Elementor &lt;= 1.4.2 - Authenticated (Contributor+) Local File Inclusion</title><link>https://agentprime.io/advisories/CVE-2024-10873/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10873/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 23 Nov 2024 04:32:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5349: LA-Studio Element Kit for Elementor &lt;= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion</title><link>https://agentprime.io/advisories/CVE-2024-5349/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5349/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jul 2024 04:31:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4431: LA-Studio Element Kit for Elementor &lt;= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter</title><link>https://agentprime.io/advisories/CVE-2024-4431/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4431/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 May 2024 03:31:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3005: LA-Studio Element Kit for Elementor &lt;= 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget</title><link>https://agentprime.io/advisories/CVE-2024-3005/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3005/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 May 2024 11:02:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2249: LA-Studio Element Kit for Elementor &lt;= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-2249/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2249/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Mar 2024 21:33:39 GMT</pubDate><category>CVE</category></item></channel></rss>