140 matches found
CVE-2026-0920-
CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 이 익스플로잇은 여기서 가장 먼저 공개됩니다. @KNxploited를 Telegram에서 팔로우하세요 — 새로 공개된 CVE, 작동하는 PoC, 정밀한 보안 연구를 위한 엘리트 피드입니다. 끊임없이 업데이트됩니다. 앞서 나가는 사람들을 위해 제작되었습니다. 🧠 개요 CVE-2026-0920 은 LA-Studio Element Kit for Elementor WordPress 플러그인에서 발견된 CVSS 9.8 Critical치명적...
CVE-2026-0920
エクスプロイト調査: CVE-2026-0920 - LA-Studio Element Kit バックドア LA-Studio Element Kit for Elementor（バージョン ≤ 1.5.6.3）で発見された重大なバックドアに関する技術分析と概念実証（PoC）。この脆弱性により、認証なしでの管理者アカウント作成が可能になります。 脆弱性の概要 元従業員によって ajaxregisterhandle 関数に意図的にバックドアが挿入されており、登録時に隠しパラメータを使用してユーザー権限を昇格させることができます。 脆弱性の種類: 不適切な認可 / 意図的なバックドア。...
CVE-2026-0920-WordPress-LA-Studio-Exploit
CVE-2026-0920 PoC：LA-Studio Element Kit 后门漏洞利用 一个用 Go 编写的健壮的概念验证（PoC）漏洞利用程序，针对 LA-Studio Element Kit for Elementor 插件（版本 = 1.5.6.3）中的严重后门漏洞。 该工具演示了未认证攻击者如何利用 lakitajax 包装器绕过安全检查并注入恶意载荷，从而创建管理员 账户。 🚨 漏洞详情 CVE： CVE-2026-0920 类型： 权限提升 / 认证绕过 严重性： 严重（9.8/10） 攻击向量： 该插件暴露了一个处理 JSON 载荷的 AJAX...
CVE-2026-103082
Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
CVE-2026-103082
The LA-Studio Element Kit for Elementor WordPress plugin (versions
CVE-2026-103082 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
EUVD-2026-90747
Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by JunHee CHO in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...
Exploit for CVE-2026-0920
CVE-2026-0920 - LA-Studio Element Kit / Unauthenticated Privil...
CVE-2026-65489 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
EUVD-2026-48100
Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...
EUVD-2026-48099
Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...
CVE-2026-65488 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
CVE-2026-65488
The CVE concerns the WordPress plugin LA-Studio Element Kit for Elementor, version <= 1.6.2. It describes an unauthenticated Cross-Site Request Forgery (CSRF) that can lead to Stored XSS. The issue originates from the plugin’s handling of CSRF, enabling an attacker to trigger stored XSS withou...
CVE-2026-65488
Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...
CVE-2026-65482 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3...
CVE-2026-65482 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3...
CVE-2026-65482
Contributor Cross Site Scripting XSS in LA-Studio Element Kit for Elementor = 1.6.2 versions...
