Description
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'lakit_bkrole' parameter during registration and gain administrator access to the site.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| choijun | LA-Studio Element Kit for Elementor | ≤ 1.5.6.3 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 5 repositories
-
John-doe-code-a11/CVE-2026-0920 ★ 7 · Jan 28, 2026
Explanation and payload of the recent vulnerability in the LA-Studio Element WordPress plugin.
-
Nxploited/CVE-2026-0920- ★ 3 · Apr 18, 2026
LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter
-
Galaxy-sc/CVE-2026-0920-WordPress-LA-Studio-Exploit ★ 2 · Jan 22, 2026
-
katranSefa/CVE-2026-0920 ★ 0 · Sep 2, 2026
-
Dx3iZ/CVE-2026-0920 ★ 0 · Jul 6, 2026
Creating a Wordpress Admin User
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.