CVE-2024-10873 | choijun LA-Studio Element Kit for Elementor Plugin up to 1.4.2 on WordPress _load_template filename control

A vulnerability has been found in choijun LA-Studio Element Kit for Elementor Plugin up to 1.4.2 on WordPress and classified as problematic. This vulnerability affects the function _load_template. The manipulation leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability was named CVE-2024-10873. Local access is required to approach this attack. There is no exploit available.