CVE-2026-28158HIGH NVDCVSS Score 7.1Severity HIGHPublished Aug 13, 2026Vendor unknownDescriptionUnauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/lasso/vulnerability/wordpress-do-lasso-plugin-358-cross-site-scripting-xss-vulnerability?_s_id=cve