LA-Studio Element Kit for Elementor

LA-Studio Element Kit for Elementor has 23 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 20 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 3 high. 2024 was the busiest year with 10 disclosures.

The most common weakness is Cross-Site Scripting, behind 11 of the records (48%). Other recurring categories include Missing Authorization, PHP Remote File Inclusion.

20 of the records (87%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2026.

18 independent researchers contributed these findings, most of them (2) reported by Francesco Carlucci. LA-Studio Element Kit for Elementor is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.0.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage87%

Open

Fixed

Get automatic notifications for all LA-Studio Element Kit for Elementor vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-65482

LA-Studio Element Kit for Elementor <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

23 records


2026-07-22 00:00	LA-Studio Element Kit for Elementor <= 1.6.2 - Cross-Site Request Forgery LA-Studio Element Kit for Elementor <= 1.6.2	`CVE-2026-65488`	4.3 Medium	Steven Julian	No
2026-07-22 00:00	LA-Studio Element Kit for Elementor <= 1.6.2 - Missing Authorization LA-Studio Element Kit for Elementor <= 1.6.2	`CVE-2026-65489`	5.3 Medium	Steven Julian	No
2026-07-22 00:00	LA-Studio Element Kit for Elementor <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting LA-Studio Element Kit for Elementor <= 1.6.2	`CVE-2026-65482`	6.4 Medium	Abu Hurayra	No
2026-07-10 14:17	LA-Studio Element Kit for Elementor <= 1.6.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type' Widget Setting LA-Studio Element Kit for Elementor <= 1.6.1	`CVE-2026-15338`	7.5 High	Wordfence PRISM	Yes
2026-06-19 00:00	LA-Studio Element Kit for Elementor <= 1.6.0 - Unauthenticated Open Registration LA-Studio Element Kit for Elementor <= 1.6.0	`CVE-2026-12276`	5.3 Medium	Mike Gozdiskowski	Yes
2026-01-21 17:31	LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter LA-Studio Element Kit for Elementor <= 1.5.6.3	`CVE-2026-0920`	9.8 Critical	Athiwat Tiprasaharn (Jitlada)	Yes
2025-12-15 00:00	LA-Studio Element Kit for Elementor < 1.5.6.3 - Missing Authorization LA-Studio Element Kit for Elementor < 1.5.6.3	`CVE-2026-24947`	5.3 Medium	NumeX	Yes
2025-09-05 00:00	LA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets LA-Studio Element Kit for Elementor <= 1.5.5.1	`CVE-2025-8360`	6.4 Medium	zer0gh0st	Yes
2025-05-29 22:06	LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets LA-Studio Element Kit for Elementor <= 1.5.2	`CVE-2025-4944`	6.4 Medium	Robert DeVore	Yes
2025-05-29 18:09	LA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter LA-Studio Element Kit for Elementor <= 1.5.2	`CVE-2025-4943`	6.4 Medium	Webbernaut	Yes

Showing 1–10 of 23 reports

Plugin Profile

Latestv1.6.2

LA-Studio Element Kit for Elementor

Author

LA-Studio

5.0(7)

100/100

Last Updated

2026-07-10 (2mo ago)

Active Installs

10,000+

Downloads

236,743

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 7.0.0

Created

2021-03-24 (6y ago)

LA-Studio Kit is an ultimate All in one addons for Elementor Page Builder, it will help you create a perfect website using Elementor. KEY FEATURES Header Footer Builder Theme Builder Archive Page Builder Search Result Page Builder 50+ Free Widgets 35+ Ready Pages 50+ Ready Sections WooCommerce Widgets Cross-Browser Compatible Fully Responsive Expert Support Team Build with Elementor and more … SUPPORT Found issue or new features? Contact our team from here.

View on WordPress.org