Lasso Analytics, Inc. Do Lasso

• CVE-2026-28158 High 7.1 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-28157 High 7.5 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability 0.4%
• CVE-2026-28156 High 8.5 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability 0.4%
• CVE-2026-28155 Medium 6.5 WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability 0.3%