Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how lambertgroup compares to other vendors in security performance

View Risk Score →

Software

lambertgroup universal video player
3
lambertgroup html5 radio player - wpbakery page builder addon
2
lambertgroup lbg zoominoutslider
2
lambertgroup multimedia playlist slider addon for wpbakery page builder
2
lambertgroup responsive html5 audio player pro with playlist
2
lambertgroup sticky radio player
2
lambertgroup universal video player - addon for wpbakery page builder
2
lambertgroup xpromoter
2
lambertgroup accordion slider pro
1
lambertgroup all in one slider responsive
1
lambertgroup allinone - banner rotator
1
lambertgroup allinone - banner with playlist
1
lambertgroup allinone - banner with thumbnails
1
lambertgroup allinone - content slider
1
lambertgroup apollo
1
lambertgroup apollo - sticky full width html5 audio player
1
lambertgroup chameleon html5 audio player with/without playlist
1
lambertgroup clever (wordpress plugin)
1
lambertgroup countdown pro wp plugin
1
lambertgroup html5 video player
1
lambertgroup html5 video player with playlist & multiple skins
1
lambertgroup image&video fullscreen background
1
lambertgroup lambertgroup - allinone - banner with playlist
1
lambertgroup lambertgroup - allinone - banner with thumbnails
1
lambertgroup lambertgroup - allinone - content slider
1
lambertgroup lbg-audio5-html5-shoutcast_sticky
1
lambertgroup magic responsive slider and carousel (wordpress plugin)
1
lambertgroup radio player shoutcast & icecast (lbg-audio4-html5-shoutcast)
1
lambertgroup radio player shoutcast & icecast wordpress plugin
1
lambertgroup revolution video player (wordpress plugin)
1
lambertgroup revolution video player with bottom playlist (revolution-video-player)
1
lambertgroup shout
1
lambertgroup shout (wordpress plugin)
1
lambertgroup shout - html5 radio player with ads - shoutcast and icecast support
1
lambertgroup shout lbg-audio8-html5-radio_ads
1
lambertgroup sticky html5 music player
1
lambertgroup uberslider
1
lambertgroup uberslider perpetuummobile
1
lambertgroup uberslider ultra
1
lambertgroup video player & fullscreen video background
1
lambertgroup youtube vimeo video player and slider
1
lambertgroup youtube vimeo video player and slider wp plugin
1

LambertGroup Multimedia Playlist Slider Addon for WPBakery Page BuilderWordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Multimedia Playlist Slider Addon for WPBakery Page Builder: from n/a through 2.1.

1 / 2
Source: NVD

Remedy

Update the WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder plugin to the latest available version (at least 2.2).
First published (updated )
CVE-2025-48154

LambertGroup Revolution Video Player With Bottom Playlist (revolution-video-player)WordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revolution Video Player With Bottom Playlist allows Reflected XSS. This issue affects Revolution Video Player With Bottom Playlist: from n/a through 2.9.2.

1 / 2
Source: NVD

Remedy

Update the WordPress Revolution Video Player With Bottom Playlist plugin to the latest available version (at least 2.9.3).
First published (updated )
CVE-2025-53212

LambertGroup SHOUTWordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT allows Reflected XSS. This issue affects SHOUT: from n/a through 3.5.3.

1 / 2
Source: NVD
First published (updated )
CVE-2025-31925

LambertGroup Magic Responsive Slider and Carousel (WordPress plugin)WordPress Magic Responsive Slider and Carousel WordPress plugin < 1.6 - SQL Injection Vulnerability

Risk 55
Severity
8.5
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress allows SQL Injection. This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through 1.4.

1 / 2
Source: NVD
First published (updated )
CVE-2025-31640

LambertGroup Universal Video PlayerWordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through <= 3.8.4.

First published (updated )
CVE-2025-69053

LambertGroup Universal Video PlayerWordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through <= 3.8.4.

First published (updated )
CVE-2025-69048

LambertGroup AllInOne - Banner with PlaylistWordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through <= 3.8.

First published (updated )
CVE-2026-28110

LambertGroup AllInOne - Content SliderWordPress LambertGroup - AllInOne - Content Slider plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Reflected XSS.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through <= 3.8.

First published (updated )
CVE-2026-28109

LambertGroup LambertGroup - AllInOne - Banner with ThumbnailsWordPress LambertGroup - AllInOne - Banner with Thumbnails plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a through <= 3.8.

First published (updated )
CVE-2026-28108

LambertGroup LBG ZoominoutsliderWordPress LBG Zoominoutslider plugin <= 5.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LBG Zoominoutslider lbgzoominoutslider allows Reflected XSS.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.5.

First published (updated )
CVE-2026-28103

LambertGroup UberSlider PerpetuumMobileWordPress UberSlider PerpetuumMobile plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider PerpetuumMobile uberSliderperpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through <= 2.3.

First published (updated )
CVE-2026-28100

LambertGroup UberSlider UltraWordPress UberSlider Ultra plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Ultra uberSliderultra allows Reflected XSS.This issue affects UberSlider Ultra: from n/a through <= 2.3.

First published (updated )
CVE-2026-28099

LambertGroup xPromoterWordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerability

Risk 55
Severity
8.5
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter topbarpromoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1.3.4.

First published (updated )
CVE-2025-68053

LambertGroup LBG ZoominoutsliderWordPress LBG Zoominoutslider plugin <= 5.4.4 - SQL Injection vulnerability

Risk 55
Severity
8.5
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Zoominoutslider lbgzoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.4.

First published (updated )
CVE-2025-68056

LambertGroup Image&Video FullScreen BackgroundWordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerability

Risk 55
Severity
8.5
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Image&Video FullScreen Background lbgfullscreenfullwidthslider allows SQL Injection.This issue affects Image&Video FullScreen Background: from n/a through <= 1.6.7.

First published (updated )
CVE-2025-62093

LambertGroup AllInOne - Banner RotatorWordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection Vulnerability

Risk 55
Severity
8.5
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows SQL Injection.This issue affects AllInOne - Banner Rotator: from n/a through <= 3.8.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-60110

LambertGroup AllInOne - Banner with ThumbnailsWordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection Vulnerability

Risk 55
Severity
8.5
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a through <= 3.8.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-60108

LambertGroup LambertGroup - AllInOne - Banner with PlaylistWordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability

Risk 55
Severity
8.5
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through <= 3.8.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-60107

LambertGroup LambertGroup - AllInOne - Content SliderWordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection Vulnerability

Risk 55
Severity
8.5
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through <= 3.8.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-60109

LambertGroup Responsive HTML5 Audio Player PRO With PlaylistWordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist allows Reflected XSS. This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through 3.5.8.

1 / 2
Source: NVD

Remedy

Update the WordPress Responsive HTML5 Audio Player PRO With Playlist plugin to the latest available version (at least 3.5.9).
First published (updated )
CVE-2025-54056

LambertGroup Universal Video Player - Addon for WPBakery Page BuilderWordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through 3.2.1.

1 / 2
Source: NVD

Remedy

Update the WordPress Universal Video Player - Addon for WPBakery Page Builder plugin to the latest available version (at least 3.2.2.0).
First published (updated )
CVE-2025-53559

LambertGroup Youtube Vimeo Video Player and SliderWordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider allows Reflected XSS. This issue affects Youtube Vimeo Video Player and Slider: from n/a through 3.8.

1 / 2
Source: NVD

Remedy

Update the WordPress Youtube Vimeo Video Player and Slider plugin to the latest available version (at least 3.9).
First published (updated )
CVE-2025-53563

LambertGroup HTML5 Radio Player - WPBakery Page Builder AddonWordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon allows Reflected XSS. This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a through 2.5.

1 / 2
Source: NVD

Remedy

Update the WordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin to the latest available version (at least 2.5.2).
First published (updated )
CVE-2025-53564

LambertGroup Radio Player Shoutcast & Icecast (lbg-audio4-html5-shoutcast)WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Radio Player Shoutcast & Icecast allows Reflected XSS. This issue affects Radio Player Shoutcast & Icecast: from n/a through 4.4.7.

1 / 2
Source: NVD

Remedy

Update the WordPress Radio Player Shoutcast & Icecast plugin to the latest available version (at least 4.4.8).
First published (updated )
CVE-2025-53205

LambertGroup Accordion Slider PROWordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Accordion Slider PRO accordionsliderpro allows Reflected XSS.This issue affects Accordion Slider PRO: from n/a through <= 1.2.

First published (updated )
CVE-2025-49066

LambertGroup xPromoterWordPress xPromoter plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup xPromoter topbarpromoter allows Reflected XSS.This issue affects xPromoter: from n/a through <= 1.3.4.

First published (updated )
CVE-2025-49046

LambertGroup Apollo - Sticky Full Width HTML5 Audio PlayerWordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player allows Reflected XSS. This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through 3.4.

1 / 2
Source: NVD

Remedy

Update the WordPress Apollo - Sticky Full Width HTML5 Audio Player plugin to the latest available version (at least 3.6.4).
First published (updated )
CVE-2025-48168

LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast SupportWordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support allows Reflected XSS. This issue affects SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support: from n/a through 3.5.4.

1 / 2
Source: NVD

Remedy

Update the WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support plugin to the latest available version (at least 3.5.5).
First published (updated )
CVE-2025-48163

LambertGroup Universal Video Player - Addon for WPBakery Page BuilderWordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through 3.2.1.

1 / 2
Source: NVD

Remedy

Update the WordPress Universal Video Player - Addon for WPBakery Page Builder plugin to the latest available version (at least 3.2.2.0).
First published (updated )
CVE-2025-48170

LambertGroup Youtube Vimeo Video Player and Slider WP PluginWordPress Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider WP Plugin allows Reflected XSS. This issue affects Youtube Vimeo Video Player and Slider WP Plugin: from n/a through 3.8.

1 / 2
Source: NVD

Remedy

Update the WordPress Youtube Vimeo Video Player and Slider WP Plugin plugin to the latest available version (at least 3.9).
First published (updated )
CVE-2025-48159

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203