Threat database

10 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 0.2%	CVE-2026-103082LA-Studio Element Kit for Elementor · Server-Side Request Forgery (SSRF) High7.2EPSS 0.2%2026-10-01CVE Database V5CVE-2026-103082 CVE-2026-103082 is a Server-Side Request Forgery (SSRF) vulnerability in LA-Studio Element Kit for Elementor. It affects versions from the initial release up to 1.6.2 inclusive. The vulnerability allows an attacker to induce the server to make HTTP requests to arbitrary domains, potentially leading to information disclosure and integrity impact. The CVSS v3.1 base score is 7.2, indicating a high severity issue. No official patch or remediation details are provided in the available data. EPSS 0.2%Vulnerability LA-Studio	CVE Database V5	2026-10-01
Medium	5.3	EPSS 0.3%	CVE-2026-65489LA-Studio Element Kit for Elementor · Missing Authorization Medium5.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65489 Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2. EPSS 0.3%Vulnerability LA-Studio #cwe-862	CVE Database V5	2026-07-23
High	7.1	EPSS 0.1%	CVE-2026-65488LA-Studio Element Kit for Elementor · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2026-07-23CVE Database V5CVE-2026-65488 Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2. EPSS 0.1%Vulnerability LA-Studio #cwe-352	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.2%	CVE-2026-65482LA-Studio Element Kit for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in LA-Studio… Medium6.5EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65482 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3. EPSS 0.2%Vulnerability LA-Studio #cwe-79	CVE Database V5	2026-07-23
Medium	4.3	EPSS 0.2%	CVE-2026-24947LA-Studio Element Kit for Elementor · Missing Authorization Medium4.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24947 Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through < 1.5.6.3. EPSS 0.2%Vulnerability LA-Studio	CVE Database V5	2026-02-03
Medium	6.5	EPSS 0.4%	CVE-2025-32194LA-Studio Element Kit for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in LA-Studio… Medium6.5EPSS 0.4%2025-04-04CVE Database V5CVE-2025-32194 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through <= 1.5.1. EPSS 0.4%Vulnerability LA-Studio	CVE Database V5	2025-04-04
Medium	6.5	EPSS 0.3%	CVE-2024-47628LA-Studio Element Kit for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in LA-Studio… Medium6.5EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47628 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through <= 1.3.9.3. EPSS 0.3%Vulnerability LA-Studio	CVE Database V5	2024-10-05
Medium	6.5	EPSS 0.3%	CVE-2024-43210LA-Studio Element Kit for Elementor · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.5EPSS 0.3%2024-08-12CVE Database V5CVE-2024-43210 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.9.2. EPSS 0.3%Vulnerability LA-Studio #cwe-79	CVE Database V5	2024-08-12
High	8.5	EPSS 0.4%	CVE-2024-37479LA-Studio Element Kit for Elementor · Local File Inclusion High8.5EPSS 0.4%2024-07-02CVE Database V5CVE-2024-37479 Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1. EPSS 0.4%Vulnerability LA-Studio	CVE Database V5	2024-07-02
Medium	4.3	EPSS 0.4%	CVE-2024-35725LA-Studio Element Kit for Elementor · Missing Authorization Medium4.3EPSS 0.4%2024-06-10CVE Database V5CVE-2024-35725 Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6. EPSS 0.4%Vulnerability LA-Studio #cwe-862	CVE Database V5	2024-06-10

Showing 1–10 of 10 results