Lasso Analytics, Inc. Do Lasso vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Lasso Analytics, Inc. Do Lasso: 4 record(s), with affected versions and fixes.

CVE-2026-28158 High · 7.1 CWE-79 Aug 13, 2026

WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.

CVE-2026-28157 High · 7.5 CWE-35 Aug 13, 2026

WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

Subscriber Path Traversal in Do Lasso <= 358 versions.

CVE-2026-28156 High · 8.5 CWE-89 Aug 13, 2026

WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

Subscriber SQL Injection in Do Lasso <= 358 versions.

CVE-2026-28155 Medium · 6.5 CWE-639 Aug 13, 2026

WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.