CVE-2026-0920-

CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 エクスプロイトはここで最初に公開されます。 Telegram で @KNxploited をフォロー — 新しく公開された CVE、動作する PoC、精密なセキュリティ研究のためのエリートフィード。絶え間なく更新。先を行く人のために作られました。 🧠 概要 CVE-2026-0920 は、WordPress プラグイン LA-Studio Element Kit for Elementor で発見された CVSS 9.8 Critical の脆弱性です。 この欠陥は、AJAX...

CVE-2026-0920

エクスプロイト調査: CVE-2026-0920 - LA-Studio Element Kit バックドア LA-Studio Element Kit for Elementor（バージョン ≤ 1.5.6.3）で発見された重大なバックドアに関する技術分析と概念実証（PoC）。この脆弱性により、認証なしでの管理者アカウント作成が可能になります。 脆弱性の概要 元従業員によって ajaxregisterhandle 関数に意図的にバックドアが挿入されており、登録時に隠しパラメータを使用してユーザー権限を昇格させることができます。 脆弱性の種類: 不適切な認可 / 意図的なバックドア。...

CVE-2026-0920-WordPress-LA-Studio-Exploit

CVE-2026-0920 PoC：LA-Studio Element Kit 后门漏洞利用 一个用 Go 编写的健壮的概念验证（PoC）漏洞利用程序，针对 LA-Studio Element Kit for Elementor 插件（版本 = 1.5.6.3）中的严重后门漏洞。 该工具演示了未认证攻击者如何利用 lakitajax 包装器绕过安全检查并注入恶意载荷，从而创建管理员 账户。 🚨 漏洞详情 CVE： CVE-2026-0920 类型： 权限提升 / 认证绕过 严重性： 严重（9.8/10） 攻击向量： 该插件暴露了一个处理 JSON 载荷的 AJAX...

CVE-2026-103082

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-103082

The LA-Studio Element Kit for Elementor WordPress plugin (versions

EUVD-2026-90747

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-103082 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by JunHee CHO in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.6.2...

CVE-2026-0920

CVE-2026-0920 스캐너 취약한 LA-Studio Element 플러그인 버전을 사용하는 WordPress 사이트에서 CVE-2026-0920 노출을 탐지 및 검증하기 위한 Python 기반 스캐너입니다. 개요 이 도구는 취약한 플러그인 버전의 등록 흐름에서 부적절한 역할 처리와 관련된 취약점인 CVE-2026-0920 의 영향을 받을 가능성이 있는 WordPress 대상을 자동으로 식별하도록 설계되었습니다. 스크립트는 대상 목록을 처리하고, 검증 확인을 시도하며, 성공적인 결과를 나중에 검토할 수 있도록 출력 파일에...

Exploit for CVE-2026-0920

CVE-2026-0920 - LA-Studio Element Kit / Unauthenticated Privil...

CVE-2026-65489

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65488

Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65482

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3...

CVE-2026-65489

CVE-2026-65489 affects the WordPress plugin “LA-Studio Element Kit for Elementor” up to version 1.6.2. The issue is described as Unauthenticated Broken Access Control, allowing access to restricted functionality without credentials. The referenced CVSS 3.1 base score is 5.3 (MEDIUM) with network ...

CVE-2026-65489 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

EUVD-2026-48100

Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-65488 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

EUVD-2026-48099

Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-65488 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

CVE-2026-65488

The CVE concerns the WordPress plugin LA-Studio Element Kit for Elementor, version &lt;= 1.6.2. It describes an unauthenticated Cross-Site Request Forgery (CSRF) that can lead to Stored XSS. The issue originates from the plugin’s handling of CSRF, enabling an attacker to trigger stored XSS withou...