LA-Studio vulnerabilities
We track 4 vulnerabilities in LA-Studio products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.
Latest LA-Studio vulnerabilities
- 7.2 High severity
LA-Studio Element Kit for Elementor: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.
- 7.1 High severity
LA-Studio Element Kit for Elementor: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Control of Filename for Include/Require Statement in PHP Program
Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.
- 8.8 High severity
LA-Studio Element Kit for Elementor: Missing Authorization
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.