LambertGroup vulnerabilities and threats

50 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.5	EPSS 0.3%	CVE-2025-68056LBG Zoominoutslider (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2025-12-16CVE Database V5CVE-2025-68056 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.4. EPSS 0.3%Vulnerability LambertGroup	CVE Database V5	2025-12-16
High	8.5	EPSS 0.2%	CVE-2025-68054CountDown With Image or Video Background (WordPress plugin) · SQL Injection High8.5EPSS 0.2%2025-12-16CVE Database V5CVE-2025-68054 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown With Image or Video Background countdown_with_background allows Blind SQL Injection.This issue affects CountDown With Image or Video Background: from n/a through <= 1.5. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-12-16
High	8.5	EPSS 0.2%	CVE-2025-68053xPromoter (WordPress plugin) · SQL Injection High8.5EPSS 0.2%2025-12-16CVE Database V5CVE-2025-68053 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter top_bar_promoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1.3.4. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-12-16
High	8.5	EPSS 0.3%	CVE-2025-62093Image&Video FullScreen Background (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2025-12-09CVE Database V5CVE-2025-62093 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_slider allows SQL Injection.This issue affects Image&Video FullScreen Background: from n/a through <= 1.6.7. EPSS 0.3%Vulnerability LambertGroup CWE-89	CVE Database V5	2025-12-09
High	8.5	EPSS 0.3%	CVE-2025-67518Accordion Slider PRO (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2025-12-09CVE Database V5CVE-2025-67518 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Blind SQL Injection.This issue affects Accordion Slider PRO: from n/a through <= 1.2. EPSS 0.3%Vulnerability LambertGroup CWE-89	CVE Database V5	2025-12-09
High	8.5	EPSS 0.3%	CVE-2025-60110AllInOne (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60110 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows SQL Injection.This issue affects AllInOne - Banner Rotator: from n/a through <= 3.8. EPSS 0.3%Vulnerability LambertGroup CWE-89	CVE Database V5	2025-09-26
High	8.5	EPSS 0.3%	CVE-2025-60109LambertGroup (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60109 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through <= 3.8. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-09-26
High	8.5	EPSS 0.3%	CVE-2025-60108LambertGroup (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60108 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a through <= 3.8. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-09-26
High	8.5	EPSS 0.3%	CVE-2025-60107LambertGroup (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through <= 3.8. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-09-26
High	7.1	EPSS 0.2%	CVE-2025-48154Multimedia Playlist Slider Addon for WPBakery Page Builder (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-48154 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbg_vp_youtube_vimeo_addon_visual_composer allows Reflected XSS.This issue affects Multimedia Playlist Slider Addon for WPBakery Page Builder: from n/a through <= 2.1. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-48159LambertGroup Youtube Vimeo Video Player and Slider WP Plugin · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-48159 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider WP Plugin video-player-youtube-vimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player and Slider WP Plugin: from n/a through <= 3.8. EPSS 0.2%Vulnerability	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-48163SHOUT (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-48163 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support lbg-audio8-html5-radio-ads allows Reflected XSS.This issue affects SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support: from n/a through <= 3.5.4. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-48168Apollo (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-48168 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through <= 3.4. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-48170Universal Video Player (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-48170 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through <= 3.2.1. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-53205Radio Player Shoutcast & Icecast (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-53205 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Radio Player Shoutcast & Icecast lbg-audio4-html5-shoutcast allows Reflected XSS.This issue affects Radio Player Shoutcast & Icecast: from n/a through <= 4.4.7. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-53212Revolution Video Player With Bottom Playlist (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-53212 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revolution Video Player With Bottom Playlist revolution-video-player allows Reflected XSS.This issue affects Revolution Video Player With Bottom Playlist: from n/a through <= 2.9.2. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-53559Universal Video Player (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-53559 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through <= 3.2.1. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-53562Universal Video Player (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-53562 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg_universal_video_player_addon_visual_composer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through <= 3.2.1. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-53563Youtube Vimeo Video Player and Slider (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-53563 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider video_player_youtube_vimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player and Slider: from n/a through <= 3.8. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20
High	7.1	EPSS 0.2%	CVE-2025-53564HTML5 Radio Player (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-53564 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg_radio_player_addon_visual_composer allows Reflected XSS.This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a through <= 2.5. EPSS 0.2%Vulnerability LambertGroup	CVE Database V5	2025-08-20

Page 2 of 3