LA-Studio Element Kit for Elementor vulnerabilities
4 known vulnerabilities in LA-Studio Element Kit for Elementor from Choijun. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
LA-Studio Element Kit for Elementor: Improper Control of Filename for Include/Require Statement in PHP Program
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.1 via the get_type_template function. This makes it possible for authenticated attackers, with contributor-level access
- 9.8 Critical severity
LA-Studio Element Kit for Elementor: Improper Privilege Management
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can register wit
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Control of Filename for Include/Require Statement in PHP Program
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.2 via the _load_template function. This makes it possible for authenticated attackers, with Contributor-level access an
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Limitation of a Pathname to a Restricted Directory
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access an