Skip to content

Lasso Analytics, Inc.

Products

Product	CVEs	Exploited	Latest
Do Lasso	4	–	Aug 13, 2026

Exploited and recent CVEs

CVE-2026-28158 High 7.1 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2026-28157 High 7.5 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability 0.4%
CVE-2026-28156 High 8.5 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability 0.4%
CVE-2026-28155 Medium 6.5 WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability 0.3%