element kit for elementor vulnerabilities and fixes

Recent CVEs affecting element kit for elementor, with upgrade or downgrade steps. 5 tracked.

Also searched as: elementkitforelementor.

element kit for elementor has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-05-30. Highest priority: CVE-2024-10873 (score 47/100).

• CVE-2025-4943 MEDIUM 6.4 UPGRADE The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-5349 HIGH 8.8 UPGRADE The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all vers
• CVE-2024-37479 HIGH 8.5 UPGRADE Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress
• CVE-2024-35725 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Stu
• CVE-2024-10873 HIGH 8.8 UPGRADE The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all vers

FAQ

How do I fix element kit for elementor vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is element kit for elementor being exploited right now?

None of the tracked element kit for elementor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which element kit for elementor CVE should I patch first?

CVE-2024-10873 currently ranks highest (47/100): The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all vers.

RSS feed for element kit for elementor · ← Back to latest CVEs