https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-4943.htmlhttps://patchthecve.com/cve/CVE-2025-4943.htmlWed, 17 Jun 2026 09:34:21 +0000MEDIUM 6.4: The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-lakit-element-link’ parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attachttps://patchthecve.com/cve/CVE-2024-10873.htmlhttps://patchthecve.com/cve/CVE-2024-10873.htmlWed, 17 Jun 2026 06:56:36 +0000HIGH 8.8: The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.2 via the _load_template function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrarhttps://patchthecve.com/cve/CVE-2024-37479.htmlhttps://patchthecve.com/cve/CVE-2024-37479.htmlWed, 17 Jun 2026 07:38:26 +0000HIGH 8.5: Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1.https://patchthecve.com/cve/CVE-2024-5349.htmlhttps://patchthecve.com/cve/CVE-2024-5349.htmlWed, 17 Jun 2026 08:15:45 +0000HIGH 8.8: The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrarhttps://patchthecve.com/cve/CVE-2024-35725.htmlhttps://patchthecve.com/cve/CVE-2024-35725.htmlWed, 17 Jun 2026 07:35:15 +0000MEDIUM 4.3: Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.