Joomla! Component SVMap 1.1.1 - Local File Inclusion

A directory traversal vulnerability in the SVMap comsvmap component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1308 info: name: Joomla! Component SVMap 1.1.1 - Local File Inclusion author: daffainfo...

CVE-2026-0920

Escáner CVE-2026-0920 Un escáner basado en Python para detectar y validar la exposición a CVE-2026-0920 en sitios WordPress que utilizan versiones vulnerables del plugin LA-Studio Element. Resumen Esta herramienta está diseñada para automatizar la identificación de objetivos WordPress...

CVE-2026-0920-

CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 The exploit drops here first. Follow @KNxploited on Telegram — your elite feed for freshly disclosed CVEs, working PoCs, and precision security research. Updated relentlessly. Built for those who stay ahead. 🧠 Overview CVE-2026-0920 is a CVSS 9...

CVE-2026-0920-WordPress-LA-Studio-Exploit

CVE-2026-0920 PoC: LA-Studio Element Kit Backdoor Exploit A robust Proof of Concept PoC exploit written in Go for the critical backdoor vulnerability found in LA-Studio Element Kit for Elementor plugin versions = 1.5.6.3. This tool demonstrates how an unauthenticated attacker can leverage the...

CVE-2026-0920

Exploit Research: CVE-2026-0920 - LA-Studio Element Kit Backdoor Technical analysis and Proof of Concept PoC for the critical backdoor discovered in LA-Studio Element Kit for Elementor versions ≤ 1.5.6.3. This vulnerability allows unauthenticated administrative account creation. Vulnerability...

Multimodal-web-attack-Dataset

MWAD: Un conjunto de datos multimodal de ataques web para la detección de inyección SQL basada en IA Descripción general El conjunto de datos multimodal de ataques web MWAD es un novedoso conjunto de datos etiquetado de ciberseguridad desarrollado como parte de la investigación del autor en...

CVE-2026-19038

A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...

CVE-2026-19038 MonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversal

A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...

EUVD-2026-53873

A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...

CVE-2026-19038

CVE-2026-19038 affects MonomythDevelopment la-forge-mcp 1.0.0, specifically the screenshotElement function in src/index.ts of the screenshot_element Tool. The issue arises from manipulation of the argument output_name, enabling path traversal. The vulnerability is exploitable remotely via a netwo...

CVE-2026-19038 MonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversal

A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...

CVE-2026-65489

CVE-2026-65489 affects the WordPress plugin “LA-Studio Element Kit for Elementor” up to version 1.6.2. The issue is described as Unauthenticated Broken Access Control, allowing access to restricted functionality without credentials. The referenced CVSS 3.1 base score is 5.3 (MEDIUM) with network ...

EUVD-2026-48100

Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...

EUVD-2026-48099

Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-65488

The CVE concerns the WordPress plugin LA-Studio Element Kit for Elementor, version <= 1.6.2. It describes an unauthenticated Cross-Site Request Forgery (CSRF) that can lead to Stored XSS. The issue originates from the plugin’s handling of CSRF, enabling an attacker to trigger stored XSS withou...

EUVD-2026-48093

Contributor Cross Site Scripting XSS in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-15338

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.1 via the gettypetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute...

CVE-2026-15338

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.1 via the gettypetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute...

CVE-2026-15338

CVE-2026-15338 concerns the LA-Studio Element Kit for Elementor plugin for WordPress. Affected: all versions up to 1.6.1. Issue: Local File Inclusion via the get_type_template function in the progress_type widget setting. Exploitation requires authenticated access at contributor level or higher, ...

CVE-2026-12276

The LA-Studio Element Kit for Elementor WordPress plugin before 1.6.1 does not check whether user registration is enabled on the site before creating an account through one of its unauthenticated AJAX actions, allowing unauthenticated attackers to register new accounts even when registration has...