Vulnerabilidades de Lasso Analytics, Inc.
CVEs publicadas que afetam produtos de Lasso Analytics, Inc.: 4 registro(s), com severidade, exploração e correções.
CVE-2026-28158
Alta · 7.1
CWE-79 13/08/2026
WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.
CVE-2026-28157
Alta · 7.5
CWE-35 13/08/2026
WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
Subscriber Path Traversal in Do Lasso <= 358 versions.
CVE-2026-28156
Alta · 8.5
CWE-89 13/08/2026
WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability
Subscriber SQL Injection in Do Lasso <= 358 versions.
CVE-2026-28155
Média · 6.5
CWE-639 13/08/2026
WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.