CVE-2026-103082
Received Received - Intake

SSRF Vulnerability in LA-Studio Element Kit for Elementor

Publication date: 2026-10-01

Last updated on: 2026-10-01

Assigner: Patchstack

Description
Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-01
Last Modified
2026-10-01
Generated
2026-10-01
AI Q&A
2026-10-01
EPSS Evaluated
N/A
NVD
CVE-2026-103082
EUVD
EUVD-2026-90747

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
la-studio lastudio_element_kit_for_elementor to 1.6.2 (inc)
la-studio lastudio_element_kit_for_elementor From 1.0.0 (inc) to 1.6.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in the LA-Studio Element Kit for Elementor plugin. It allows attackers to trick the server into making unauthorized requests to internal systems, potentially leaking sensitive data behind the firewall. The vulnerability affects versions up to 1.6.2.

Detection Guidance

To detect this SSRF vulnerability in LA-Studio Element Kit for Elementor, check if the plugin version is 1.6.2 or below. Use WordPress admin panel to inspect installed plugins or run commands like 'wp plugin list' in CLI to verify versions. Ensure the plugin is updated to 1.6.3 or later.

Impact Analysis

An attacker could exploit this to access internal systems or sensitive data within your network. However, the severity is low and exploitation is considered unlikely. The main risk is data exposure from behind firewalls.

Compliance Impact

SSRF vulnerabilities can lead to unauthorized data access, which may violate GDPR (data protection) or HIPAA (health data privacy) if sensitive information is exposed. Compliance could be impacted if data breaches occur due to this flaw.

Mitigation Strategies

Update the LA-Studio Element Kit for Elementor plugin to version 1.6.3 or later. Enable auto-update for vulnerable plugins if using Patchstack. Ensure the plugin is not accessible to unauthorized users by restricting privileges.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-103082. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart