CVE-2026-28157

CVE-2026-28157 is a path traversal vulnerability in the WordPress Do Lasso plugin, affecting versions

CVE-2026-28155

Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...

PT-2025-4592 · Coolify · Coolify

Name of the Vulnerable Software and Affected Versions: Coolify versions 4.0.0-beta.358 and earlier Description: The issue allows attackers to inject arbitrary shell commands by altering the project name, potentially resulting in full system compromise, creation, modification, or deletion of...