Skip to content
OpenAdvisories

Vendor

LambertGroup

61 known vulnerabilities.

LambertGroup at a glance

Last 12 months
25
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 5 vulnerabilities Dec 2025 January 2026: 11 vulnerabilities February 2026: 0 vulnerabilities March 2026: 9 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202690
Feb 202600
Jan 2026110
Dec 202550
Nov 202500
Oct 202500
Sep 202540
Aug 2025130
Jul 202510
Jun 202560
May 2025110
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Universal Video Player 4 Universal Video Player - Addon for WPBakery Page Builder 3 Image&Video FullScreen Background 2 SHOUT 2 xPromoter 2 LambertGroup - AllInOne - Content Slider 2 LBG Zoominoutslider 2 HTML5 Radio Player - WPBakery Page Builder Addon 2 Sticky Radio Player 2 Multimedia Playlist Slider Addon for WPBakery Page Builder 2 LambertGroup - AllInOne - Banner with Playlist 2 Magic Responsive Slider and Carousel WordPress 2 AllInOne - Banner Rotator 2 Responsive HTML5 Audio Player PRO With Playlist 2 LambertGroup - AllInOne - Banner with Thumbnails 2 Accordion Slider PRO 2 CountDown With Image or Video Background 2 Chameleon HTML5 Audio Player With/Without Playlist 1 Sticky HTML5 Music Player 1 Youtube Vimeo Video Player and Slider WP Plugin 1 SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support 1 Youtube Vimeo Video Player and Slider 1 UberSlider MouseInteraction 1 Radio Player Shoutcast & Icecast 1 UberSlider PerpetuumMobile 1 CountDown Pro WP Plugin 1 CLEVER 1 Magic Slider 1 Multimedia Responsive Carousel with Image Video Audio Support 1 HTML5 Video Player with Playlist & Multiple Skins 1 CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon 1 UberSlider Ultra 1 Radio Player Shoutcast & Icecast WordPress Plugin 1 UberSlider Classic 1 Apollo - Sticky Full Width HTML5 Audio Player 1 Revolution Video Player 1 Video Player & FullScreen Video Background 1 Famous - Responsive Image And Video Grid Gallery WordPress Plugin 1 HTML5 Video Player 1 UberSlider 1
All Critical High Medium Low Exploited only Public exploit

61 results · Feed

  • High 7.1
    CVE-2026-28112

    WordPress AllInOne - Banner Rotator plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows Reflected XSS.This issue affects AllInOne - Banner Rotator: from n/a through <= 3.8.

    LambertGroup AllInOne - Banner Rotator
  • High 7.1
    CVE-2026-28110

    WordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - B…

    LambertGroup LambertGroup - AllInOne - Banner with Playlist
  • High 7.1
    CVE-2026-28109

    WordPress LambertGroup - AllInOne - Content Slider plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Reflected XSS.This issue affects LambertGroup - AllInOne - Content Slid…

    LambertGroup LambertGroup - AllInOne - Content Slider
  • High 7.1
    CVE-2026-28102

    WordPress UberSlider Classic plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Classic uberSlider_classic allows Reflected XSS.This issue affects UberSlider Classic: from n/a through <= 2.5.

    LambertGroup UberSlider Classic
  • High 7.1
    CVE-2026-28108

    WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Reflected XSS.This issue affects LambertGroup - AllInOne - B…

    LambertGroup LambertGroup - AllInOne - Banner with Thumbnails
  • High 7.1
    CVE-2026-28103

    WordPress LBG Zoominoutslider plugin <= 5.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows Reflected XSS.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.5.

    LambertGroup LBG Zoominoutslider
  • High 7.1
    CVE-2026-28100

    WordPress UberSlider PerpetuumMobile plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider PerpetuumMobile uberSlider_perpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through <= 2.…

    LambertGroup UberSlider PerpetuumMobile
  • High 7.1
    CVE-2026-28101

    WordPress UberSlider MouseInteraction plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider MouseInteraction uberSlider_mouseinteraction allows Reflected XSS.This issue affects UberSlider MouseInteraction: from n/a through <=…

    LambertGroup UberSlider MouseInteraction
  • High 7.1
    CVE-2026-28099

    WordPress UberSlider Ultra plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Ultra uberSlider_ultra allows Reflected XSS.This issue affects UberSlider Ultra: from n/a through <= 2.3.

    LambertGroup UberSlider Ultra
  • High 7.1
    CVE-2025-69053

    WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through <= 3.8.4.

    LambertGroup Universal Video Player
  • High 7.1
    CVE-2025-69048

    WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through <= 3.8.4.

    LambertGroup Universal Video Player
  • High 7.1
    CVE-2025-49066

    WordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Reflected XSS.This issue affects Accordion Slider PRO: from n/a through <= 1.2.

    LambertGroup Accordion Slider PRO
  • High 7.1
    CVE-2025-48094

    WordPress Magic Slider plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic Slider magic_slider allows Reflected XSS.This issue affects Magic Slider: from n/a through <= 2.2.

    LambertGroup Magic Slider
  • High 7.1
    CVE-2025-47666

    WordPress Image&Video FullScreen Background plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_slider allows Reflected XSS.This issue affects Image&Video FullScreen Background: fro…

    LambertGroup Image&Video FullScreen Background
  • High 7.1
    CVE-2025-49046

    WordPress xPromoter plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup xPromoter top_bar_promoter allows Reflected XSS.This issue affects xPromoter: from n/a through <= 1.3.4.

    LambertGroup xPromoter
  • High 7.1
    CVE-2025-49043

    WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic_carousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordP…

    LambertGroup Magic Responsive Slider and Carousel WordPress Web / CMS
  • High 7.1
    CVE-2025-32123

    WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Video Player with Playlist & Multiple Skins lbg-vp2-html5-rightside allows Reflected XSS.This issue affects HTML5 Video Player with Playli…

    LambertGroup HTML5 Video Player with Playlist & Multiple Skins
  • High 7.1
    CVE-2025-27005

    WordPress HTML5 Video Player plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Video Player lbg-vp2-html5-bottom allows Reflected XSS.This issue affects HTML5 Video Player: from n/a through <= 5.3.5.

    LambertGroup HTML5 Video Player
  • High 7.1
    CVE-2025-27004

    WordPress Famous - Responsive Image And Video Grid Gallery WordPress Plugin plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Famous - Responsive Image And Video Grid Gallery WordPress Plugin famous_grid_image_and_video_gallery allows Reflected XSS.This issue affects Fa…

    LambertGroup Famous - Responsive Image And Video Grid Gallery WordPress Plugin Web / CMS
  • High 7.1
    CVE-2025-27002

    WordPress CountDown With Image or Video Background plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup CountDown With Image or Video Background countdown-with-background allows Reflected XSS.This issue affects CountDown With Image or Video Backgro…

    LambertGroup CountDown With Image or Video Background
  • High 8.5
    CVE-2025-68056

    WordPress LBG Zoominoutslider plugin <= 5.4.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.4.

    LambertGroup LBG Zoominoutslider
  • High 8.5
    CVE-2025-68054

    WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown With Image or Video Background countdown_with_background allows Blind SQL Injection.This issue affects CountDown With Image or Video B…

    LambertGroup CountDown With Image or Video Background
  • High 8.5
    CVE-2025-68053

    WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter top_bar_promoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1.3.4.

    LambertGroup xPromoter
  • High 8.5
    CVE-2025-62093

    WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_slider allows SQL Injection.This issue affects Image&Video FullScreen Background: fro…

    LambertGroup Image&Video FullScreen Background
  • High 8.5
    CVE-2025-67518

    WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Blind SQL Injection.This issue affects Accordion Slider PRO: from n/a through <= 1.2.

    LambertGroup Accordion Slider PRO
  • High 8.5
    CVE-2025-60110

    WordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows SQL Injection.This issue affects AllInOne - Banner Rotator: from n/a through <= 3.8.

    LambertGroup AllInOne - Banner Rotator
  • High 8.5
    CVE-2025-60109

    WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Conten…

    LambertGroup LambertGroup - AllInOne - Content Slider
  • High 8.5
    CVE-2025-60108

    WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInO…

    LambertGroup LambertGroup - AllInOne - Banner with Thumbnails
  • High 8.5
    CVE-2025-60107

    WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInO…

    LambertGroup LambertGroup - AllInOne - Banner with Playlist
  • High 7.1
    CVE-2025-48154

    WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbg_vp_youtube_vimeo_addon_visual_composer allows Reflected XSS.This issue affects Mu…

    LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder
  • High 7.1
    CVE-2025-48159

    WordPress Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider WP Plugin video-player-youtube-vimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player an…

    LambertGroup Youtube Vimeo Video Player and Slider WP Plugin
  • High 7.1
    CVE-2025-48163

    WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support lbg-audio8-html5-radio-ads allows Reflected XSS.This issue affects SHOUT - H…

    LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support
  • High 7.1
    CVE-2025-48168

    WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Wid…

    LambertGroup Apollo - Sticky Full Width HTML5 Audio Player
  • High 7.1
    CVE-2025-48170

    WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affect…

    LambertGroup Universal Video Player - Addon for WPBakery Page Builder
  • High 7.1
    CVE-2025-53205

    WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Radio Player Shoutcast & Icecast lbg-audio4-html5-shoutcast allows Reflected XSS.This issue affects Radio Player Shoutcast & Icecast: from n/a t…

    LambertGroup Radio Player Shoutcast & Icecast
  • High 7.1
    CVE-2025-53212

    WordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revolution Video Player With Bottom Playlist revolution-video-player allows Reflected XSS.This issue affects Revolution Video Player With Bottom…

    LambertGroup Revolution Video Player With Bottom Playlist
  • High 7.1
    CVE-2025-53559

    WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affect…

    LambertGroup Universal Video Player - Addon for WPBakery Page Builder
  • High 7.1
    CVE-2025-53562

    WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg_universal_video_player_addon_visual_composer allows Reflected XSS.This issue affect…

    LambertGroup Universal Video Player - Addon for WPBakery Page Builder
  • High 7.1
    CVE-2025-53563

    WordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider video_player_youtube_vimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player and Slider: …

    LambertGroup Youtube Vimeo Video Player and Slider
  • High 7.1
    CVE-2025-53564

    WordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg_radio_player_addon_visual_composer allows Reflected XSS.This issue affects HTML5 Radio Play…

    LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon