LA-Studio Element Kit for Elementor < 1.1.6 – Missing Authorization
Discription

Description The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on a REST-API endpoint in versions up to, and including, 1.1.5. This makes it possible for unauthenticated attackers to update the plugin's…Read More

Back to Main

Subscribe for the latest news: