La-studioweb vulnerabilities
We track 4 vulnerabilities in La-studioweb products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 23, 2024.
Latest La-studioweb vulnerabilities
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Control of Filename for Include/Require Statement in PHP Program
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.2 via the _load_template function. This makes it possible for authenticated attackers, with Contributor-level access an
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Control of Filename for Include/Require Statement in PHP Program
Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Limitation of a Pathname to a Restricted Directory
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access an
- 8.8 High severity
LA-Studio Element Kit for Elementor: Missing Authorization
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.