LA-Studio Element Kit for Elementor
LA-Studio
Developer
1.6.0
Latest version
10,000
Installations
No date
Last updated
Vulnerability history
0 present
18 fixed
3 Mitigation rules
- Authenticated (Contributor+) Local File Inclusion vulnerability<= 1.3.8.11 day ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widget vulnerability<= 1.4.94 days ago
- Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter vulnerability<= 1.5.6.3Jan 21, 2026
- Broken Access Control vulnerability< 1.5.6.3Dec 15, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability<= 1.5.5.1Sep 6, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets vulnerability<= 1.5.2May 30, 2025
- Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter vulnerability<= 1.5.2May 30, 2025
- Cross Site Scripting (XSS) vulnerability<= 1.5.1Apr 4, 2025
- Authenticated (Contributor+) Post Disclosure vulnerability<= 1.4.4Dec 3, 2024
- Authenticated (Contributor+) Local File Inclusion vulnerability<= 1.4.2Nov 22, 2024
- Cross Site Scripting (XSS) vulnerability<= 1.3.9.3Sep 30, 2024
- Cross Site Scripting (XSS) vulnerability<= 1.3.9.2Aug 9, 2024
- Local File Inclusion vulnerability<= 1.3.8.1Jul 2, 2024
- Broken Access Control vulnerability<= 1.3.6Jun 6, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.3.7.6May 23, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget vulnerability<= 1.3.7.5May 3, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.3.7.4Mar 14, 2024
- Broken Access Control vulnerability<= 1.1.5Dec 26, 2023