Former Employee Leaves Backdoor In WordPress Plugin With Over 20,000 Active Installs

On January 12th, 2026, the Wordfence threat intelligence team received a submission for a Backdoor vulnerability in the LA-Studio Element Kit for Elementor, a WordPress plugin with more than 20,000+ active installations. This vulnerability makes it possible for an unauthenticated