Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: choijun Component: Element Kit For Elementor Clear all filters
TI-2025-04432 CVE-2025-4943 · GHSA-g2qp-8c9p-46fv

Cross-site scripting in choijun LA-Studio Element Kit for Elementor

Priority LOW 28

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-lakit-element-link’ parameter in all versions up to, and including, 1.5.2 due to insufficient input…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00292 Published 2025-05-30 No fix listed CWE-79
TI-2024-24983 CVE-2024-37479 · GHSA-335g-4xxp-8f55

WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability

Priority MEDIUM 40

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Ki…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00443 Published 2024-07-02 No fix listed CWE-98