Skip to content
OpenAdvisories
High · 8.5 CVE-2024-37479 EUVD-2024-36695GHSA-335g-4xxp-8f55

WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability

Published Jul 2, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1.

Affected products

VendorProductAffectedFixed
LA-Studio LA-Studio Element Kit for Elementor ≤ 1.3.8.1 —

References