Skip to content

CVE-2026-0920

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
January 23, 2026
Last Seen
January 23, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A backdoor vulnerability in the LA-Studio Element Kit for Elementor has compromised over 20,000 WordPress sites, allowing attackers to create admin accounts without authentication. This vulnerability, tracked as CVE-2026-0920, poses a significant risk of complete website takeover.

Public Exploits

Checking GitHub for proof-of-concept code…

Related Entities