Known vulnerabilities in the Lastudio Element Kit plugin
14 security advisories have been published for the Lastudio Element Kit plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Lastudio Element Kit - Security Vulnerability (CVE-2026-103082) HIGH
- Lastudio Element Kit - Broken Access Control (CVE-2026-65489) MEDIUM
- Lastudio Element Kit - Cross-Site Request Forgery (CSRF) (CVE-2026-65488) HIGH
- Lastudio Element Kit - Cross-Site Scripting (XSS) (CVE-2026-65482) MEDIUM
- Lastudio Element Kit - Path Traversal (CVE-2026-15338) HIGH
- Lastudio Element Kit - Security Vulnerability (CVE-2026-0920) CRITICAL
- Lastudio Element Kit - Cross-Site Scripting (XSS) (CVE-2025-4944) MEDIUM
- Lastudio Element Kit - Cross-Site Scripting (XSS) (CVE-2025-4943) MEDIUM
- Lastudio Element Kit - Cross-Site Scripting (XSS) (CVE-2025-3106) MEDIUM
- Lastudio Element Kit - Path Traversal (CVE-2024-10873) HIGH
- Lastudio Element Kit - Path Traversal (CVE-2024-5349) HIGH
- Lastudio Element Kit - Cross-Site Scripting (XSS) (CVE-2024-4431) MEDIUM
- Lastudio Element Kit - Cross-Site Scripting (XSS) (CVE-2024-3005) MEDIUM
- Lastudio Element Kit - Cross-Site Scripting (XSS) (CVE-2024-2249) MEDIUM