Skip to content
OpenAdvisories

Vendor

choijun

12 known vulnerabilities.

Products

LA-Studio Element Kit for Elementor 12
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-0920 Public exploit

    LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter

    The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can register wi…

    choijun LA-Studio Element Kit for Elementor Web / CMS