Advisories · Technology

LA-Studio Element Kit for Elementor.

Every CVE that names LA-Studio Element Kit for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103082 CVE record

CVSS 7.2 High

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability
- LA-Studio Element Kit for Elementor
- Server-side request forgery (SSRF)
Not analysed yet 1 Oct 2026
CVE-2026-65489 CVE record

CVSS 5.3 Medium

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
- LA-Studio Element Kit for Elementor
- Broken access control
Not analysed yet 23 Jul 2026
CVE-2026-65488 CVE record

CVSS 7.1 High

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
- LA-Studio Element Kit for Elementor
- Cross-site request forgery (CSRF)
Not analysed yet 23 Jul 2026
CVE-2026-65482 CVE record

CVSS 6.5 Medium

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
- LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2026
CVE-2026-12276 CVE record

CVSS 5.3 Medium

LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open Registration
- LA-Studio Element Kit for Elementor
Not analysed yet 10 Jul 2026
CVE-2026-24947 CVE record

CVSS 4.3 Medium

WordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerability
- LA-Studio Element Kit for Elementor
- Broken access control
Not analysed yet 3 Feb 2026
CVE-2025-32194 CVE record

CVSS 6.5 Medium

WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
- LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
Not analysed yet 4 Apr 2025
CVE-2023-50884 CVE record

CVSS 6.5 Medium

WordPress LA-Studio Element Kit for Elementor plugin <= 1.1.5 - Broken Access Control vulnerability
- LA-Studio Element Kit for Elementor
- Broken access control
Not analysed yet 9 Dec 2024
CVE-2024-47628 CVE record

CVSS 6.5 Medium

WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.3 - Cross Site Scripting (XSS) vulnerability
- LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2024
CVE-2024-43210 CVE record

CVSS 6.5 Medium

WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerability
- LA-Studio Element Kit for Elementor
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2024
CVE-2024-37479 CVE record

CVSS 8.5 High

WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability
- LA-Studio Element Kit for Elementor
- File inclusion
Not analysed yet 2 Jul 2024
CVE-2024-35725 CVE record

CVSS 4.3 Medium

WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability
- LA-Studio Element Kit for Elementor
- Broken access control
Not analysed yet 10 Jun 2024