CVE-2026-0920 | LA-Studio Element Kit for Elementor Plugin up to 1.5.6.3 on WordPress User Creation ajax_register_handle lakit_bkrole Remote Code Execution

A vulnerability categorized as critical has been discovered in LA-Studio Element Kit for Elementor Plugin up to 1.5.6.3 on WordPress. This vulnerability affects the function ajax_register_handle of the component User Creation Handler. Such manipulation of the argument lakit_bkrole leads to Remote Code Execution.

This vulnerability is traded as CVE-2026-0920. The attack may be launched remotely. There is no exploit available.