Skip to content
OpenAdvisories
High · 7.2 CVE-2026-103082 EUVD-2026-90747GHSA-4jjm-937m-p89r

WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Patchstack

Description

Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

Affected products

VendorProductAffectedFixed
LA-Studio LA-Studio Element Kit for Elementor ≤ 1.6.2 —

References