Pricing
WordPress securityInstantly fix and mitigate vulnerabilitiesPlugin auditingPaid auditing for WordPress vendorsManaged VDPStart a security program for your pluginsBug BountyJoin the community and earn bountiesEnterprise APIAt scale monitoring and vPatching for hostsVulnerability databaseThe latest WordPress security intelligence
Login Start trial
Plugin Icon

LA-Studio Element Kit for Elementor

LA-Studio

Developer

1.5.5.4

Latest version

20,000

Installations

Aug 29, 2025

Last updated

WordPress Plugin
Active VDP
Report vulnerability
    VulnerabilitiesSecurity PolicySecurity Contributors

Vulnerability history

0 present
14 fixed
2 Mitigation rules
  • Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability
    <= 1.5.5.1
    Sep 6, 2025
  • Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets vulnerability
    <= 1.5.2
    May 30, 2025
  • Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter vulnerability
    <= 1.5.2
    May 30, 2025
  • Cross Site Scripting (XSS) vulnerability
    <= 1.5.1
    Apr 4, 2025
  • Authenticated (Contributor+) Post Disclosure vulnerability
    <= 1.4.4
    Dec 3, 2024
  • Authenticated (Contributor+) Local File Inclusion vulnerability
    <= 1.4.2
    Nov 22, 2024
  • Cross Site Scripting (XSS) vulnerability
    <= 1.3.9.3
    Sep 30, 2024
  • Cross Site Scripting (XSS) vulnerability
    <= 1.3.9.2
    Aug 9, 2024
  • Local File Inclusion vulnerability
    <= 1.3.8.1
    Jul 2, 2024
  • Broken Access Control vulnerability
    <= 1.3.6
    Jun 6, 2024
  • Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
    <= 1.3.7.6
    May 23, 2024
  • Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget vulnerability
    <= 1.3.7.5
    May 3, 2024
  • Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
    <= 1.3.7.4
    Mar 14, 2024
  • Broken Access Control vulnerability
    <= 1.1.5
    Dec 26, 2023

Vulnerability mitigation

  • Pricing
  • Application security (SCA)
  • RapidMitigate New
  • Threat Intelligence (API)
  • Documentation
  • VS Monarx
  • VS Imunify360
  • VS Wordfence
  • Log in

Code security

  • Managed VDP New
  • Active VDP directory
  • Security auditing
  • Compliance (CRA) New
  • Log in New

Bug bounty

  • Bug bounty
  • Leaderboard
  • Guidelines
  • Learn New
  • Report
  • Discord
  • Log in New

Use cases

  • Web developers
  • Webhosts New
  • Software vendors
  • WordPress
  • WooCommerce

Resources

  • Vulnerability database
  • Whitepaper 2025 New
  • Articles
  • Case studies New
  • Webinars New
  • Vulnerability statistics

Patchstack

  • About
  • Careers
  • Merch store
  • Media kit
  • LinkedIn
  • Facebook
  • X
© 2025 Patchstack
DPA
Privacy Policy
Accessibility
Terms & Conditions
EU Flag