CVE-2026-28157: WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
Published Aug 13, 2026
·Updated
Subscriber Path Traversal in Do Lasso <= 358 versions.
Affected Software
1 affected component
WordPress Do Lasso plugin<=358
Event History
Aug 13, 2026
CVE Published
via MITRE·01:36 PM
Data Sourced
via MITRE·01:36 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-28157?
CVE-2026-28157 has a severity rating of 7.5, categorized as high.
2
What is the impact of CVE-2026-28157?
CVE-2026-28157 can lead to unauthorized access to sensitive files on the server due to a path traversal vulnerability.
3
How do I fix CVE-2026-28157?
To fix CVE-2026-28157, update the Do Lasso plugin to version 359 or later.
4
Who is affected by CVE-2026-28157?
CVE-2026-28157 affects all versions of the Do Lasso plugin up to and including version 358.
5
What causes CVE-2026-28157?
CVE-2026-28157 is caused by insufficient validation of user input, leading to path traversal exploits.