CVE-2026-103082: WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Q: Which plugin versions are affected?

LA-Studio Element Kit for Elementor versions through 1.6.2 are affected. The available data does not identify the first fixed version.

Q: Does exploitation require an authenticated WordPress account or user interaction?

No. The CVSS vector indicates the issue is network-accessible, requires no privileges, and requires no user interaction.

Q: What is the expected security impact?

The CVSS vector rates confidentiality and integrity impact as low, with no availability impact indicated. Scope is marked as changed.

Published Oct 1, 2026

Updated

Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

Affected Software

1 affected component

LA-Studio LA-Studio Element Kit for Elementor<=1.6.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade lastudio-element-kit to a version that resolves this vulnerability.
Fixed in 1.6.3

Event History

Oct 1, 2026

CVE Published

via MITRE·10:40 AM

Data Sourced

via MITRE·10:40 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which plugin versions are affected?

LA-Studio Element Kit for Elementor versions through 1.6.2 are affected. The available data does not identify the first fixed version.

Does exploitation require an authenticated WordPress account or user interaction?

No. The CVSS vector indicates the issue is network-accessible, requires no privileges, and requires no user interaction.

What is the expected security impact?

The CVSS vector rates confidentiality and integrity impact as low, with no availability impact indicated. Scope is marked as changed.

CVE-2026-103082: WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which plugin versions are affected?

Does exploitation require an authenticated WordPress account or user interaction?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which plugin versions are affected?

Does exploitation require an authenticated WordPress account or user interaction?

What is the expected security impact?