CVE-2026-0920-

CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 이 익스플로잇은 여기서 가장 먼저 공개됩니다. @KNxploited를 Telegram에서 팔로우하세요 — 새로 공개된 CVE, 작동하는 PoC, 정밀한 보안 연구를 위한 엘리트 피드입니다. 끊임없이 업데이트됩니다. 앞서 나가는 사람들을 위해 제작되었습니다. 🧠 개요 CVE-2026-0920 은 LA-Studio Element Kit for Elementor WordPress 플러그인에서 발견된 CVSS 9.8 Critical치명적...

CVE-2026-0920

익스플로잇 연구: CVE-2026-0920 - LA-Studio Element Kit 백도어 LA-Studio Element Kit for Elementor버전 ≤ 1.5.6.3에서 발견된 치명적인 백도어에 대한 기술 분석 및 개념 증명PoC입니다. 이 취약점은 인증되지 않은 관리자 계정 생성을 허용합니다. 취약점 개요 전 직원이 ajaxregisterhandle 함수에 의도적으로 백도어를 삽입하여, 등록 과정에서 숨겨진 파라미터를 사용해 사용자 권한을 상승시킬 수 있게 했습니다. 취약점 유형: 부적절한 권한 부여 / 의도적...

CVE-2026-0920-WordPress-LA-Studio-Exploit

CVE-2026-0920 PoC: LA-Studio Element Kit 백도어 익스플로잇 LA-Studio Element Kit for Elementor 플러그인버전 = 1.5.6.3에서 발견된 치명적인 백도어 취약점을 위한 Go로 작성된 강력한 PoCProof of Concept 익스플로잇입니다. 이 도구는 인증되지 않은 공격자가 lakitajax 래퍼를 악용하여 보안 검사를 우회하고 악성 페이로드를 주입하여 관리자Administrator 계정을 생성할 수 있는 방법을 시연합니다. 🚨 취약점 세부 정보 CVE:...

CVE-2026-103082

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-103082

The LA-Studio Element Kit for Elementor WordPress plugin (versions

EUVD-2026-90747

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-103082 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by JunHee CHO in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...

CVE-2026-103082: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-0920

CVE-2026-0920 - WordPress Plugin LA-Studio Element Kit / Unauthenticated Privilege Escalation A proof-of-concept exploit for CVE-2026-0920 , an unauthenticated privilege-escalation vulnerability in the LA-Studio Element Kit WordPress plugin. The vulnerability allows an unauthenticated attacker to...

Exploit for CVE-2026-0920

CVE-2026-0920 - LA-Studio Element Kit / Unauthenticated Privil...

CVE-2026-65489

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65488

Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65489 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65489

CVE-2026-65489 affects the WordPress plugin “LA-Studio Element Kit for Elementor” up to version 1.6.2. The issue is described as Unauthenticated Broken Access Control, allowing access to restricted functionality without credentials. The referenced CVSS 3.1 base score is 5.3 (MEDIUM) with network ...

CVE-2026-65489

Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-65489 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

EUVD-2026-48100

Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...

EUVD-2026-48099

Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-65488 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...