CVE-2024-5349

The CVE-2024-5349 entry concerns LA-Studio Element Kit for Elementor (WordPress) with a Local File Inclusion vulnerability via the map_style parameter in versions up to 1.3.8.1. Exploitation requires authenticated access (Contributor+) and can lead to arbitrary PHP code execution on the server, p...