Element Kit For Elementor vulnerabilities
4 known vulnerabilities in Element Kit For Elementor from La-studioweb. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Control of Filename for Include/Require Statement in PHP Program
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.2 via the _load_template function. This makes it possible for authenticated attackers, with Contributor-level access an
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Control of Filename for Include/Require Statement in PHP Program
Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.
- 8.8 High severity
LA-Studio Element Kit for Elementor: Improper Limitation of a Pathname to a Restricted Directory
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access an
- 8.8 High severity
LA-Studio Element Kit for Elementor: Missing Authorization
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.