CVE-2026-28156

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28157

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28155

Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...

CVE-2026-28158

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28157

CVE-2026-28157 is a path traversal vulnerability in the WordPress Do Lasso plugin, affecting versions

CVE-2026-28158

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-28158

CVE-2026-28158 concerns unauthenticated XSS in the WordPress Do Lasso plugin versions

EUVD-2026-57950

Subscriber Path Traversal in Do Lasso = 358 versions...

EUVD-2026-57951

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-28157

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28158 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28158 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

EUVD-2026-57948

Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...

CVE-2026-28155

Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...

CVE-2026-28155 WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...

CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28155

CVE-2026-28155 corresponds to an unauthenticated Insecure Direct Object References (IDOR) vulnerability in the WordPress Do Lasso plugin, affecting versions up to 358. The CVSS 3.1 base metrics indicate Network attack vector, Low attack complexity, No privileges required, with Confidentiality imp...