PT-2026-57100 · WordPress · La-Studio Element Kit For Elementor
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
LA-Studio Element Kit for Elementor versions prior to 1.6.1
Description
The plugin fails to verify if user registration is enabled on the site before creating an account via an unauthenticated AJAX action. This allows unauthenticated attackers to register new accounts even when site-wide registration is disabled.
Recommendations
Update LA-Studio Element Kit for Elementor to version 1.6.1 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
La-Studio Element Kit For Elementor