CVE-2026-0920

Recherche d'exploitation : CVE-2026-0920 - Backdoor dans LA-Studio Element Kit Analyse technique et Preuve de Concept PoC pour la backdoor critique découverte dans LA-Studio Element Kit pour Elementor versions ≤ 1.5.6.3. Cette vulnérabilité permet la création non authentifiée de comptes...

CVE-2026-0920-WordPress-LA-Studio-Exploit

PoC CVE-2026-0920 : Exploitation de la porte dérobée LA-Studio Element Kit Un exploit Proof of Concept PoC robuste écrit en Go pour la vulnérabilité critique de porte dérobée trouvée dans le plugin LA-Studio Element Kit for Elementor versions = 1.5.6.3. Cet outil démontre comment un attaquant non...

CVE-2026-0920

ماسح CVE-2026-0920 ماسح مبني على بايثون لاكتشاف والتحقق من التعرض لثغرة CVE-2026-0920 في مواقع ووردبريس التي تستخدم إصدارات ضعيفة من إضافة LA-Studio Element. نظرة عامة صُممت هذه الأداة لأتمتة تحديد أهداف ووردبريس التي قد تتأثر بـ CVE-2026-0920 ، وهي ثغرة مرتبطة بمعالجة غير صحيحة للأدوار أثناء عمل...

CVE-2026-0920-

CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 الاستغلال يُنشر هنا أولاً. تابع @KNxploited على تيليغرام — مصدرك النخبوي لأحدث ثغرات CVE المُعلنة، ونماذج الإثبات PoCs الجاهزة، وأبحاث أمنية دقيقة. يُحدَّث باستمرار. صُمم لمن يبقون في المقدمة. 🧠 نظرة عامة CVE-2026-0920 هي ثغرة حرجة بدرجة 9.8 وف...

CVE-2026-103082

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-103082

The LA-Studio Element Kit for Elementor WordPress plugin (versions

CVE-2026-103082 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-103082 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

EUVD-2026-90747

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by JunHee CHO in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...

PT-2026-103776

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-103082: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

Exploit for CVE-2026-0920

CVE-2026-0920 - LA-Studio Element Kit / Unauthenticated Privil...

CVE-2026-65489

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65488

Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65482

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3...

CVE-2026-65489 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65489

CVE-2026-65489 affects the WordPress plugin “LA-Studio Element Kit for Elementor” up to version 1.6.2. The issue is described as Unauthenticated Broken Access Control, allowing access to restricted functionality without credentials. The referenced CVSS 3.1 base score is 5.3 (MEDIUM) with network ...

EUVD-2026-48100

Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-65488 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...