Lasso Analytics, Inc. vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-28158Do Lasso (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-13CVE Database V5CVE-2026-28158 Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions. EPSS 0.3%Vulnerability Lasso Analytics CWE-79	CVE Database V5	2026-08-13
High	7.5	EPSS 0.4%	CVE-2026-28157Do Lasso (WordPress plugin) · Path Traversal: '.../...// High7.5EPSS 0.4%2026-08-13CVE Database V5CVE-2026-28157 Subscriber Path Traversal in Do Lasso <= 358 versions. EPSS 0.4%Vulnerability Lasso Analytics CWE-35 #ghsa-36hp-4q45-jxjc	CVE Database V5	2026-08-13
High	8.5	EPSS 0.4%	CVE-2026-28156Do Lasso (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2026-08-13CVE Database V5CVE-2026-28156 Subscriber SQL Injection in Do Lasso <= 358 versions. EPSS 0.4%Vulnerability Lasso Analytics CWE-89 #ghsa-87hp-hrvg-crh2	CVE Database V5	2026-08-13
Medium	6.5	EPSS 0.3%	CVE-2026-28155Do Lasso (WordPress plugin) · Insecure Direct Object Reference Medium6.5EPSS 0.3%2026-08-13CVE Database V5CVE-2026-28155 Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions. EPSS 0.3%Vulnerability Lasso Analytics CWE-639 #ghsa-gcxj-g9hm-45pg	CVE Database V5	2026-08-13

Page 1 of 1