535 matches found
PT-2026-3919
Name of the Vulnerable Software and Affected Versions LA-Studio Element Kit for Elementor versions through 1.5.6.3 Description The LA-Studio Element Kit for Elementor plugin for WordPress is susceptible to unauthorized administrative user creation. This occurs because the ajax register handle...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter vulnerability
Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakitbkrole parameter vulnerability discovered by WordFence in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.5.6.3...
20,000 WordPress Sites Affected by Backdoor Vulnerability in LA-Studio Element Kit for Elementor WordPress Plugin
On January 12th, 2026, we received a submission for a Backdoor vulnerability in the LA-Studio Element Kit for Elementor, a WordPress plugin with more than 20,000+ active installations. This vulnerability makes it possible for an unauthenticated attacker to create malicious administrator users...
VulnCheck KEV: CVE-2026-0920
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajaxregisterhandle' function not restricting what user roles a user can register with. This makes it possible for...
La Suite Docs Cross-Site Script Vulnerability
La Suite Docs is an open-source, scalable collaboration note-taking, wiki, and documentation platform developed by La Suite numérique. Versions 3.8.0 to 4.3.0 of La Suite Docs contain cross-site scripting vulnerabilities. These vulnerabilities stem from the Interlinking function not verifying URL...
CVE-2025-71109
In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit e424054000878 "MIPS: Tracing: Reduce the overhead of dynamic Function Tracer", the macro UASMiLAmostly has been used, and this macro can...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Table of Contents Widget vulnerability discovered by Webbernaut in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.4.9...
WordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by NumeX in WordPress Plugin LA-Studio Element Kit for Elementor versions 1.5.6.3...
EUVD-2025-134270
Malicious code in la-pem-misa npm...
EUVD-2025-134269
Malicious code in la-pem-misa npm...
MAL-2025-179777 Malicious code in la-pem-misa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d95de71497dd563e6d6a9237e95c18ad693ee00dc104ea4e065ab3798abdac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2014-4975
Malware in sbrugna...
EUVD-2008-3723
Malware in sbrugna...
EUVD-2011-1334
Malware in sbrugna...
EUVD-2014-7602
Malware in sbrugna...
EUVD-2014-6716
Malware in sbrugna...
EUVD-2025-11845
Malicious code in bioql PyPI...
EUVD-2025-12026
Malicious code in bioql PyPI...