LA-Studio Element Kit for Elementor vulnerabilities

4 known vulnerabilities in LA-Studio Element Kit for Elementor from LA-Studio. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  LA-Studio Element Kit for Elementor: Server-Side Request Forgery

  CVE-2026-103082Oct 1, 2026LA-Studio

  Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

• 7.1 High severity

  LA-Studio Element Kit for Elementor: Cross-Site Request Forgery

  CVE-2026-65488Jul 23, 2026LA-Studio

  Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

• 8.8 High severity

  LA-Studio Element Kit for Elementor: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-37479Jul 2, 2024LA-Studio

  Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.

• 8.8 High severity

  LA-Studio Element Kit for Elementor: Missing Authorization

  CVE-2024-35725Jun 10, 2024LA-Studio

  Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.