Server-Side Request Forgery Vulnerability in LA-Studio Element Kit by LA-Studio
CVE-2026-103082

7.2HIGH

Key Information:

Vendor

WordPress
Status
La-studio Element Kit For Elementor
Vendor
CVE Published:
1 October 2026

What is CVE-2026-103082?

The LA-Studio Element Kit for Elementor contains a Server-Side Request Forgery (SSRF) vulnerability that allows attackers to exploit server-side request handling. This can potentially lead to unauthorized access to sensitive data or the ability to perform malicious actions on behalf of the server. The vulnerability affects all versions up to and including 1.6.2.

Affected Version(s)

LA-Studio Element Kit for Elementor 0 <= 1.6.2

References

https://patchstack.com/database/wordpress/plugin/lastudio...
vdb-entry

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

JunHee CHO | Patchstack Bug Bounty Program
.