Exploit for CVE-2026-0920

kitploit · 2026-09-02

Description

Missing README in the tools repository.

Parameteraction · request body

Path/wp-admin/admin-ajax.php

Unauthenticated administrator creation via unsafe AJAX endpoint in LA-Studio Element Kit for Elementor (≤1.5.6.3).

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Modified:2026-09-02 23:06

Last Seen:2026-09-05 17:48

Reporter:KitPloit

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-KATRANSEFA-CVE-2026-0920
لا يحتوي هذا المستودع على ملف README.