Skip to content
OpenAdvisories

Vendor

LambertGroup

61 known vulnerabilities.

Products

Universal Video Player 4 Universal Video Player - Addon for WPBakery Page Builder 3 Image&Video FullScreen Background 2 SHOUT 2 xPromoter 2 LambertGroup - AllInOne - Content Slider 2 LBG Zoominoutslider 2 HTML5 Radio Player - WPBakery Page Builder Addon 2 Sticky Radio Player 2 Multimedia Playlist Slider Addon for WPBakery Page Builder 2 LambertGroup - AllInOne - Banner with Playlist 2 Magic Responsive Slider and Carousel WordPress 2 AllInOne - Banner Rotator 2 Responsive HTML5 Audio Player PRO With Playlist 2 LambertGroup - AllInOne - Banner with Thumbnails 2 Accordion Slider PRO 2 CountDown With Image or Video Background 2 Chameleon HTML5 Audio Player With/Without Playlist 1 Sticky HTML5 Music Player 1 Youtube Vimeo Video Player and Slider WP Plugin 1 SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support 1 Youtube Vimeo Video Player and Slider 1 UberSlider MouseInteraction 1 Radio Player Shoutcast & Icecast 1 UberSlider PerpetuumMobile 1 CountDown Pro WP Plugin 1 CLEVER 1 Magic Slider 1 Multimedia Responsive Carousel with Image Video Audio Support 1 HTML5 Video Player with Playlist & Multiple Skins 1 CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon 1 UberSlider Ultra 1 Radio Player Shoutcast & Icecast WordPress Plugin 1 UberSlider Classic 1 Apollo - Sticky Full Width HTML5 Audio Player 1 Revolution Video Player 1 Video Player & FullScreen Video Background 1 Famous - Responsive Image And Video Grid Gallery WordPress Plugin 1 HTML5 Video Player 1 UberSlider 1
All Critical High Medium Low Exploited only Public exploit

61 results · Clear filters · Feed

  • High 7.1
    CVE-2026-28112

    WordPress AllInOne - Banner Rotator plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows Reflected XSS.This issue affects AllInOne - Banner Rotator: from n/a through <= 3.8.

    LambertGroup AllInOne - Banner Rotator
  • High 7.1
    CVE-2026-28110

    WordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - B…

    LambertGroup LambertGroup - AllInOne - Banner with Playlist
  • High 7.1
    CVE-2026-28109

    WordPress LambertGroup - AllInOne - Content Slider plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Reflected XSS.This issue affects LambertGroup - AllInOne - Content Slid…

    LambertGroup LambertGroup - AllInOne - Content Slider
  • High 7.1
    CVE-2026-28102

    WordPress UberSlider Classic plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Classic uberSlider_classic allows Reflected XSS.This issue affects UberSlider Classic: from n/a through <= 2.5.

    LambertGroup UberSlider Classic
  • High 7.1
    CVE-2026-28108

    WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Reflected XSS.This issue affects LambertGroup - AllInOne - B…

    LambertGroup LambertGroup - AllInOne - Banner with Thumbnails
  • High 7.1
    CVE-2026-28103

    WordPress LBG Zoominoutslider plugin <= 5.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows Reflected XSS.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.5.

    LambertGroup LBG Zoominoutslider
  • High 7.1
    CVE-2026-28100

    WordPress UberSlider PerpetuumMobile plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider PerpetuumMobile uberSlider_perpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through <= 2.…

    LambertGroup UberSlider PerpetuumMobile
  • High 7.1
    CVE-2026-28101

    WordPress UberSlider MouseInteraction plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider MouseInteraction uberSlider_mouseinteraction allows Reflected XSS.This issue affects UberSlider MouseInteraction: from n/a through <=…

    LambertGroup UberSlider MouseInteraction
  • High 7.1
    CVE-2026-28099

    WordPress UberSlider Ultra plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Ultra uberSlider_ultra allows Reflected XSS.This issue affects UberSlider Ultra: from n/a through <= 2.3.

    LambertGroup UberSlider Ultra
  • High 7.1
    CVE-2025-69053

    WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through <= 3.8.4.

    LambertGroup Universal Video Player
  • High 7.1
    CVE-2025-69048

    WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through <= 3.8.4.

    LambertGroup Universal Video Player
  • High 7.1
    CVE-2025-49066

    WordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Reflected XSS.This issue affects Accordion Slider PRO: from n/a through <= 1.2.

    LambertGroup Accordion Slider PRO
  • High 7.1
    CVE-2025-48094

    WordPress Magic Slider plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic Slider magic_slider allows Reflected XSS.This issue affects Magic Slider: from n/a through <= 2.2.

    LambertGroup Magic Slider
  • High 7.1
    CVE-2025-47666

    WordPress Image&Video FullScreen Background plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_slider allows Reflected XSS.This issue affects Image&Video FullScreen Background: fro…

    LambertGroup Image&Video FullScreen Background
  • High 7.1
    CVE-2025-49046

    WordPress xPromoter plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup xPromoter top_bar_promoter allows Reflected XSS.This issue affects xPromoter: from n/a through <= 1.3.4.

    LambertGroup xPromoter
  • High 7.1
    CVE-2025-49043

    WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic_carousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordP…

    LambertGroup Magic Responsive Slider and Carousel WordPress Web / CMS
  • High 7.1
    CVE-2025-32123

    WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Video Player with Playlist & Multiple Skins lbg-vp2-html5-rightside allows Reflected XSS.This issue affects HTML5 Video Player with Playli…

    LambertGroup HTML5 Video Player with Playlist & Multiple Skins
  • High 7.1
    CVE-2025-27005

    WordPress HTML5 Video Player plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Video Player lbg-vp2-html5-bottom allows Reflected XSS.This issue affects HTML5 Video Player: from n/a through <= 5.3.5.

    LambertGroup HTML5 Video Player
  • High 7.1
    CVE-2025-27004

    WordPress Famous - Responsive Image And Video Grid Gallery WordPress Plugin plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Famous - Responsive Image And Video Grid Gallery WordPress Plugin famous_grid_image_and_video_gallery allows Reflected XSS.This issue affects Fa…

    LambertGroup Famous - Responsive Image And Video Grid Gallery WordPress Plugin Web / CMS
  • High 7.1
    CVE-2025-27002

    WordPress CountDown With Image or Video Background plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup CountDown With Image or Video Background countdown-with-background allows Reflected XSS.This issue affects CountDown With Image or Video Backgro…

    LambertGroup CountDown With Image or Video Background
  • High 8.5
    CVE-2025-68056

    WordPress LBG Zoominoutslider plugin <= 5.4.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.4.

    LambertGroup LBG Zoominoutslider
  • High 8.5
    CVE-2025-68054

    WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown With Image or Video Background countdown_with_background allows Blind SQL Injection.This issue affects CountDown With Image or Video B…

    LambertGroup CountDown With Image or Video Background
  • High 8.5
    CVE-2025-68053

    WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter top_bar_promoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1.3.4.

    LambertGroup xPromoter
  • High 8.5
    CVE-2025-62093

    WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_slider allows SQL Injection.This issue affects Image&Video FullScreen Background: fro…

    LambertGroup Image&Video FullScreen Background
  • High 8.5
    CVE-2025-67518

    WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Blind SQL Injection.This issue affects Accordion Slider PRO: from n/a through <= 1.2.

    LambertGroup Accordion Slider PRO
  • High 8.5
    CVE-2025-60110

    WordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows SQL Injection.This issue affects AllInOne - Banner Rotator: from n/a through <= 3.8.

    LambertGroup AllInOne - Banner Rotator
  • High 8.5
    CVE-2025-60109

    WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Conten…

    LambertGroup LambertGroup - AllInOne - Content Slider
  • High 8.5
    CVE-2025-60108

    WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInO…

    LambertGroup LambertGroup - AllInOne - Banner with Thumbnails
  • High 8.5
    CVE-2025-60107

    WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInO…

    LambertGroup LambertGroup - AllInOne - Banner with Playlist
  • High 7.1
    CVE-2025-48154

    WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbg_vp_youtube_vimeo_addon_visual_composer allows Reflected XSS.This issue affects Mu…

    LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder
  • High 7.1
    CVE-2025-48159

    WordPress Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider WP Plugin video-player-youtube-vimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player an…

    LambertGroup Youtube Vimeo Video Player and Slider WP Plugin
  • High 7.1
    CVE-2025-48163

    WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support lbg-audio8-html5-radio-ads allows Reflected XSS.This issue affects SHOUT - H…

    LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support
  • High 7.1
    CVE-2025-48168

    WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Wid…

    LambertGroup Apollo - Sticky Full Width HTML5 Audio Player
  • High 7.1
    CVE-2025-48170

    WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affect…

    LambertGroup Universal Video Player - Addon for WPBakery Page Builder
  • High 7.1
    CVE-2025-53205

    WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Radio Player Shoutcast & Icecast lbg-audio4-html5-shoutcast allows Reflected XSS.This issue affects Radio Player Shoutcast & Icecast: from n/a t…

    LambertGroup Radio Player Shoutcast & Icecast
  • High 7.1
    CVE-2025-53212

    WordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revolution Video Player With Bottom Playlist revolution-video-player allows Reflected XSS.This issue affects Revolution Video Player With Bottom…

    LambertGroup Revolution Video Player With Bottom Playlist
  • High 7.1
    CVE-2025-53559

    WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affect…

    LambertGroup Universal Video Player - Addon for WPBakery Page Builder
  • High 7.1
    CVE-2025-53562

    WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg_universal_video_player_addon_visual_composer allows Reflected XSS.This issue affect…

    LambertGroup Universal Video Player - Addon for WPBakery Page Builder
  • High 7.1
    CVE-2025-53563

    WordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider video_player_youtube_vimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player and Slider: …

    LambertGroup Youtube Vimeo Video Player and Slider
  • High 7.1
    CVE-2025-53564

    WordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg_radio_player_addon_visual_composer allows Reflected XSS.This issue affects HTML5 Radio Play…

    LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon