Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2024-37479

WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LA-Studio LA-Studio Element Kit for Elementor

Default version status: unaffected

  • n/a to ≤ 1.3.8.1affected

References