Is LA-Studio Element Kit for Elementor safe to use?

Laskyr does not give safety verdicts. The latest version (1.6.3) has 1 known unpatched vulnerability. As of 2026-11-04, the sources we check list the newest release of LA-Studio Element Kit for Elementor as affected and name no fixed version yet. Keep LA-Studio Element Kit for Elementor on the latest version (1.6.3) and remove it if you do not use it.

Which versions of LA-Studio Element Kit for Elementor are vulnerable?

Known issues on record (newest first): Server-side request forgery (SSRF) (1.6.2 and older, fixed in 1.6.3); Missing authorization check (1.6.2 and older, fixed in 1.6.3); Cross-site scripting (XSS) (1.6.3 and older); Cross-site request forgery (CSRF) (1.6.2 and older, fixed in 1.6.3); File inclusion (1.6.1 and older, fixed in 1.6.2); Security issue (older than 1.6.1, fixed in 1.6.1). The full list with sources is on this page.

What is the latest version of LA-Studio Element Kit for Elementor?

1.6.3, according to wordpress.org (last updated 2026-09-30). It has 10,000+ active installs.

What should I do if my LA-Studio Element Kit for Elementor is out of date?

Take a backup, then update it from Dashboard > Updates (or run wp plugin update lastudio-element-kit). If you cannot update right away, deactivate it until you can. If you think the site was already attacked, run a free scan at https://laskyr.com/scan.

Plugins · lastudio-element-kit · data as of 2026-11-04

Is LA-Studio Element Kit for Elementor safe? Known vulnerabilities and latest version

Latest version: 1.6.3
Last updated: 2026-09-30
Active installs: 10,000+
Known issues on record: 24
Unpatched in latest: 1
Tested up to WP: 7.1.4 · PHP 7.4+

The advanced addons for Elementor — by LA-Studio

What to do

There is no fixed version yet. If you can live without LA-Studio Element Kit for Elementor for now, deactivate it and delete it until the developer ships a fix.
If you must keep it, limit who can log in (remove unused accounts, especially low-level ones) and put a web application firewall in front of the site.
Watch for an update: get an email when this page changes.
If you ran a vulnerable version and something looks off (spam pages, strange admins, redirects), run the free scan, or have us clean it: Emergency Cleanup, $499.

With WP-CLI: wp plugin get lastudio-element-kit --field=version shows what you run; wp plugin update lastudio-element-kit updates it.

Check your version

Known vulnerabilities

24 on record, newest first. “Affected” is the version range the source gives; “fixed in” is the version the source names, or (marked *) the first wordpress.org release after the last affected version.

high 7.2 CVE-2026-103082 · published 2026-10-01

Server-side request forgery (SSRF) in LA-Studio Element Kit for Elementor (1.6.2 and older)

Affected: 1.6.2 and older
Fixed in: 1.6.3
Access needed (per CVSS): No login needed
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

NVD CVE-2026-103082 Patchstack advisory

medium 5.3 CVE-2026-65489 · published 2026-07-23

Missing authorization check in LA-Studio Element Kit for Elementor (1.6.2 and older)

Affected: 1.6.2 and older
Fixed in: 1.6.3
Access needed (per CVSS): No login needed
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

NVD CVE-2026-65489 Patchstack advisory

medium 6.5 affects latest 1.6.3 CVE-2026-65482 · published 2026-07-23

Cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.6.3 and older)

Affected: 1.6.3 and older
Fixed in: no fix listed yet
Access needed (per CVSS): Needs a low-level account (e.g. subscriber); someone on the site has to click a link or open a page
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3.

NVD CVE-2026-65482 Patchstack advisory

high 7.1 CVE-2026-65488 · published 2026-07-23

Cross-site request forgery (CSRF) in LA-Studio Element Kit for Elementor (1.6.2 and older)

Affected: 1.6.2 and older
Fixed in: 1.6.3
Access needed (per CVSS): No login needed; someone on the site has to click a link or open a page
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

NVD CVE-2026-65488 Patchstack advisory

high 7.5 CVE-2026-15338 · published 2026-07-11

File inclusion in LA-Studio Element Kit for Elementor (1.6.1 and older)

Affected: 1.6.1 and older
Fixed in: 1.6.2 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.1 via the get_type_template function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. The wp_normalize_path function used in get_template only normalizes directory separators and does not resolve or reject path traversal sequences, while the extension check is trivially bypassed because the caller already appends the required extension to the traversal payload.

NVD CVE-2026-15338 Wordfence advisory Code change (fix)Plugin source

medium 5.3 CVE-2026-12276 · published 2026-07-10

Security issue in LA-Studio Element Kit for Elementor (older than 1.6.1)

Affected: older than 1.6.1
Fixed in: 1.6.1
Access needed (per CVSS): No login needed
Range from: CVE record (the advisory publisher) · score by CISA ADP

Details from the advisory

The LA-Studio Element Kit for Elementor WordPress plugin before 1.6.1 does not check whether user registration is enabled on the site before creating an account through one of its unauthenticated AJAX actions, allowing unauthenticated attackers to register new accounts even when registration has been disabled site-wide.

NVD CVE-2026-12276 WPScan advisory

medium 4.3 CVE-2026-24947 · published 2026-02-03

Missing authorization check in LA-Studio Element Kit for Elementor (1.5.6.3 and older)

Affected: 1.5.6.3 and older
Fixed in: 1.5.6.3
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

NVD CVE-2026-24947 Patchstack advisory

critical 9.8 CVE-2026-0920 · published 2026-01-22

Privilege escalation in LA-Studio Element Kit for Elementor (1.5.6.3 and older)

Affected: 1.5.6.3 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): No login needed
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'lakit_bkrole' parameter during registration and gain administrator access to the site.

NVD CVE-2026-0920 Wordfence advisory Code change (fix)Plugin source

medium 6.4 CVE-2025-8360 · published 2025-09-06

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.5.5.1 and older)

Affected: 1.5.5.1 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets in all versions up to, and including, 1.5.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

NVD CVE-2025-8360 Wordfence advisory Code change (fix)

medium 6.4 CVE-2025-4944 · published 2025-05-30

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.5.2 and older)

Affected: 1.5.2 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Compare and Google Maps widgets in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

NVD CVE-2025-4944 Wordfence advisory Code change (fix)wordpress.org

medium 5.4 CVE-2025-4943 · published 2025-05-30

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.5.2 and older)

Affected: 1.5.2 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber); someone on the site has to click a link or open a page
Range from: CVE record (the advisory publisher) · score by NVD

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-lakit-element-link’ parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

NVD CVE-2025-4943 Wordfence advisory Code change (fix)wordpress.org Plugin source

medium 6.4 CVE-2025-3106 · published 2025-04-18

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.4.9 and older)

Affected: 1.4.9 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Table of Contents widget in all versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

NVD CVE-2025-3106 Wordfence advisory Code change (fix)wordpress.org Plugin source

medium 6.5 CVE-2025-32194 · published 2025-04-04

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.5.1 and older)

Affected: 1.5.1 and older
Fixed in: 1.5.2
Access needed (per CVSS): Needs a low-level account (e.g. subscriber); someone on the site has to click a link or open a page
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through <= 1.5.1.

NVD CVE-2025-32194 Patchstack advisory

medium 6.5 CVE-2023-50884 · published 2024-12-09

Missing authorization check in LA-Studio Element Kit for Elementor (1.1.5 and older)

Affected: 1.1.5 and older
Fixed in: 1.1.6
Access needed (per CVSS): No login needed
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

NVD CVE-2023-50884 Patchstack advisory

medium 4.3 CVE-2024-10787 · published 2024-12-04

Information disclosure in LA-Studio Element Kit for Elementor (1.4.4 and older)

Affected: 1.4.4 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.4 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private and draft posts created by Elementor that they should not have access to.

NVD CVE-2024-10787 Wordfence advisory Code change (fix)

high 8.8 CVE-2024-10873 · published 2024-11-23

File inclusion in LA-Studio Element Kit for Elementor (1.4.2 and older)

Affected: 1.4.2 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.2 via the _load_template function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

NVD CVE-2024-10873 Wordfence advisory Code change (fix)Plugin source

medium 6.5 CVE-2024-47628 · published 2024-10-05

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.9.3 and older)

Affected: 1.3.9.3 and older
Fixed in: 1.3.9.7
Access needed (per CVSS): Needs a low-level account (e.g. subscriber); someone on the site has to click a link or open a page
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through <= 1.3.9.3.

NVD CVE-2024-47628 Patchstack advisory

medium 6.5 CVE-2024-43210 · published 2024-08-12

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.9.2 and older)

Affected: 1.3.9.2 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber); someone on the site has to click a link or open a page
Range from: CVE record (the advisory publisher) · score by Patchstack

Details from the advisory

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.9.2.

NVD CVE-2024-43210 Patchstack advisory

high 8.8 CVE-2024-37479 · published 2024-07-02

File inclusion in LA-Studio Element Kit for Elementor (1.3.8.1 and older)

Affected: 1.3.8.1 and older
Fixed in: 1.3.9
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by NVD

Details from the advisory

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1.

NVD CVE-2024-37479 Patchstack advisory

high 8.8 CVE-2024-5349 · published 2024-07-02

File inclusion in LA-Studio Element Kit for Elementor (1.3.8.1 and older)

Affected: 1.3.8.1 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

NVD CVE-2024-5349 Wordfence advisory Code change (fix)

high 8.8 CVE-2024-35725 · published 2024-06-10

Missing authorization check in LA-Studio Element Kit for Elementor (1.3.6 and older)

Affected: 1.3.6 and older
Fixed in: 1.3.7.4
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by NVD

Details from the advisory

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.

NVD CVE-2024-35725 Patchstack advisory

medium 6.4 CVE-2024-4431 · published 2024-05-23

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.7.6 and older)

Affected: 1.3.7.6 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.7.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

NVD CVE-2024-4431 Wordfence advisory Code change (fix)wordpress.org Plugin source

medium 6.4 CVE-2024-3005 · published 2024-05-02

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.7.5 and older)

Affected: 1.3.7.5 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber)
Range from: CVE record (the advisory publisher) · score by Wordfence

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's LaStudioKit Post Author widget in all versions up to, and including, 1.3.7.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

NVD CVE-2024-3005 Wordfence advisory Code change (fix)

medium 5.4 CVE-2024-2249 · published 2024-03-14

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.7.4 and older)

Affected: 1.3.7.4 and older
Fixed in: 1.6.0 *
Access needed (per CVSS): Needs a low-level account (e.g. subscriber); someone on the site has to click a link or open a page
Range from: CVE record (the advisory publisher) · score by NVD

Details from the advisory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LinkWrapper attribute found in several widgets in all versions up to, and including, 1.3.7.4 due to insufficient input sanitization and output escaping the user supplied attribute. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

NVD CVE-2024-2249 Wordfence advisory Code change (fix)

Recent activity

2026-09-30 — latest release on wordpress.org (1.6.3).
2026-10-01 — Server-side request forgery (SSRF) disclosed (CVE-2026-103082), fixed in 1.6.3.
2026-07-23 — Missing authorization check disclosed (CVE-2026-65489), fixed in 1.6.3.
2026-07-23 — Cross-site scripting (XSS) disclosed (CVE-2026-65482), no fix listed yet.

Free. We check the CVE feeds every day and email you only when a new issue for LA-Studio Element Kit for Elementor (lastudio-element-kit) is published or a fix ships. Unsubscribe in one click.

Browse vulnerabilities

Types found in this plugin: Cross-site scripting (XSS) (11) · Missing authorization (4) · File inclusion (4) · Server-side request forgery (SSRF) (1) · Cross-site request forgery (CSRF) (1) · Privilege escalation (1) · Sensitive data exposure (1)

Where this data comes from

Version, last update, installs: wordpress.org/plugins/lastudio-element-kit (Plugins API), fetched 2026-11-04.
Vulnerabilities: NIST National Vulnerability Database (NVD), checked 2026-11-04. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Each record links to its CVE page and to the original advisory (Wordfence, Patchstack or WPScan) where there is one. We only list a CVE here when its references or its advisory name this exact plugin, so a few real issues may be missing; none should be about a different plugin. Spot an error? Email Daniel.

Badge for your site or docs (states facts with a date, not a verdict):

<a href="https://laskyr.com/plugins/lastudio-element-kit"><img src="https://laskyr.com/plugins/lastudio-element-kit/badge.svg" alt="LA-Studio Element Kit for Elementor vulnerability status"></a>

← Check another plugin · Free hacked-site scan

Is LA-Studio Element Kit for Elementor safe? Known vulnerabilities and latest version

The latest version (1.6.3) has 1 known unpatched vulnerability

What to do

Check your version

Known vulnerabilities

Server-side request forgery (SSRF) in LA-Studio Element Kit for Elementor (1.6.2 and older)

Missing authorization check in LA-Studio Element Kit for Elementor (1.6.2 and older)

Cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.6.3 and older)

Cross-site request forgery (CSRF) in LA-Studio Element Kit for Elementor (1.6.2 and older)

File inclusion in LA-Studio Element Kit for Elementor (1.6.1 and older)

Security issue in LA-Studio Element Kit for Elementor (older than 1.6.1)

Missing authorization check in LA-Studio Element Kit for Elementor (1.5.6.3 and older)

Privilege escalation in LA-Studio Element Kit for Elementor (1.5.6.3 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.5.5.1 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.5.2 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.5.2 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.4.9 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.5.1 and older)

Missing authorization check in LA-Studio Element Kit for Elementor (1.1.5 and older)

Information disclosure in LA-Studio Element Kit for Elementor (1.4.4 and older)

File inclusion in LA-Studio Element Kit for Elementor (1.4.2 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.9.3 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.9.2 and older)

File inclusion in LA-Studio Element Kit for Elementor (1.3.8.1 and older)

File inclusion in LA-Studio Element Kit for Elementor (1.3.8.1 and older)

Missing authorization check in LA-Studio Element Kit for Elementor (1.3.6 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.7.6 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.7.5 and older)

Stored cross-site scripting (XSS) in LA-Studio Element Kit for Elementor (1.3.7.4 and older)

Recent activity

Get an email when LA-Studio Element Kit for Elementor has a new vulnerability

Browse vulnerabilities

Where this data comes from