Skip to content
OpenAdvisories

Vendor

LambertGroup

61 known vulnerabilities.

Products

Universal Video Player 4 Universal Video Player - Addon for WPBakery Page Builder 3 Image&Video FullScreen Background 2 SHOUT 2 xPromoter 2 LambertGroup - AllInOne - Content Slider 2 LBG Zoominoutslider 2 HTML5 Radio Player - WPBakery Page Builder Addon 2 Sticky Radio Player 2 Multimedia Playlist Slider Addon for WPBakery Page Builder 2 LambertGroup - AllInOne - Banner with Playlist 2 Magic Responsive Slider and Carousel WordPress 2 AllInOne - Banner Rotator 2 Responsive HTML5 Audio Player PRO With Playlist 2 LambertGroup - AllInOne - Banner with Thumbnails 2 Accordion Slider PRO 2 CountDown With Image or Video Background 2 Chameleon HTML5 Audio Player With/Without Playlist 1 Sticky HTML5 Music Player 1 Youtube Vimeo Video Player and Slider WP Plugin 1 SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support 1 Youtube Vimeo Video Player and Slider 1 UberSlider MouseInteraction 1 Radio Player Shoutcast & Icecast 1 UberSlider PerpetuumMobile 1 CountDown Pro WP Plugin 1 CLEVER 1 Magic Slider 1 Multimedia Responsive Carousel with Image Video Audio Support 1 HTML5 Video Player with Playlist & Multiple Skins 1 CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon 1 UberSlider Ultra 1 Radio Player Shoutcast & Icecast WordPress Plugin 1 UberSlider Classic 1 Apollo - Sticky Full Width HTML5 Audio Player 1 Revolution Video Player 1 Video Player & FullScreen Video Background 1 Famous - Responsive Image And Video Grid Gallery WordPress Plugin 1 HTML5 Video Player 1 UberSlider 1
All Critical High Medium Low Exploited only Public exploit

61 results · Feed

  • High 7.1
    CVE-2025-54056

    WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With …

    LambertGroup Responsive HTML5 Audio Player PRO With Playlist
  • High 7.1
    CVE-2025-30626

    WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbg_vp_youtube_vimeo_addon_visual_composer allows Reflected XSS.This issue affects Mu…

    LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder
  • High 7.5
    CVE-2025-31070

    WordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin <= 2.5 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg-cleverbakery allows Path Traversal.This issue affects HTML5 Radio Player - WPBakery Page Builder …

    LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon
  • High 7.1
    CVE-2025-31057

    WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player elementor_widget_universal_video_player allows Reflected XSS.This issue affects Universal Video Player: from n/a through …

    LambertGroup Universal Video Player
  • High 7.1
    CVE-2025-31058

    WordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revolution Video Player revolution_video_player allows Reflected XSS.This issue affects Revolution Video Player: from n/a through <= 2.9.2.

    LambertGroup Revolution Video Player
  • High 7.1
    CVE-2025-31426

    WordPress Sticky Radio Player plugin <= 3.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcast_sticky allows Reflected XSS.This issue affects Sticky Radio Player: from n/a through <= 3.4.

    LambertGroup Sticky Radio Player
  • High 7.5
    CVE-2025-31635

    WordPress CLEVER plugin <= 2.6 - Arbitrary File Download Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER lbg-audio11-html5-shoutcast_history allows Path Traversal.This issue affects CLEVER: from n/a through <= 2.6.

    LambertGroup CLEVER
  • High 7.1
    CVE-2025-31917

    WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal_video_player allows Reflected XSS.This issue affects Universal Video Player: from n/a through <= 3.8.3.

    LambertGroup Universal Video Player
  • High 7.1
    CVE-2025-31925

    WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT lbg-audio8-html5-radio_ads allows Reflected XSS.This issue affects SHOUT: from n/a through <= 3.5.3.

    LambertGroup SHOUT
  • High 8.5
    CVE-2025-31637

    WordPress SHOUT plugin <= 3.5.3 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup SHOUT lbg-audio8-html5-radio_ads allows SQL Injection.This issue affects SHOUT: from n/a through <= 3.5.3.

    LambertGroup SHOUT
  • High 8.5
    CVE-2025-31640

    WordPress Magic Responsive Slider and Carousel WordPress plugin < 1.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allows SQL Injection.This issue affects Magic Responsive Slider and Carousel WordP…

    LambertGroup Magic Responsive Slider and Carousel WordPress Web / CMS
  • High 8.5
    CVE-2025-31641

    WordPress UberSlider plugin <= 2.3 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup UberSlider uber-classic allows SQL Injection.This issue affects UberSlider: from n/a through < 2.6.

    LambertGroup UberSlider
  • High 8.5
    CVE-2025-31928

    WordPress Multimedia Responsive Carousel with Image Video Audio Support plugin <= 2.6.0 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multimedia Responsive Carousel with Image Video Audio Support multimedia-carousel allows SQL Injection.This issue affects Multimedia Responsive …

    LambertGroup Multimedia Responsive Carousel with Image Video Audio Support
  • High 8.5
    CVE-2025-31926

    WordPress Sticky Radio Player plugin <= 3.4 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcast_sticky allows SQL Injection.This issue affects Sticky Radio Player: from n/a through <= 3.4.

    LambertGroup Sticky Radio Player
  • High 8.5
    CVE-2025-32287

    WordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows SQL Injection.This issue affects Responsive HTML5 Audio Player PRO With …

    LambertGroup Responsive HTML5 Audio Player PRO With Playlist
  • High 8.5
    CVE-2025-32290

    WordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky HTML5 Music Player lbg-audio3-html5 allows SQL Injection.This issue affects Sticky HTML5 Music Player: from n/a through <= 3.1.6.

    LambertGroup Sticky HTML5 Music Player
  • High 8.5
    CVE-2025-32301

    WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown Pro WP Plugin circular_countdown allows SQL Injection.This issue affects CountDown Pro WP Plugin: from n/a through <= 2.7.

    LambertGroup CountDown Pro WP Plugin
  • High 8.5
    CVE-2025-32306

    WordPress Radio Player Shoutcast & Icecast theme <= 4.4.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast & Icecast WordPress Plugin audio4-html5 allows Blind SQL Injection.This issue affects Radio Player Shoutcast & Icecast Wo…

    LambertGroup Radio Player Shoutcast & Icecast WordPress Plugin Web / CMS
  • High 8.5
    CVE-2025-32307

    WordPress Chameleon HTML5 Audio Player With/Without Playlist plugin <= 3.5.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Chameleon HTML5 Audio Player With/Without Playlist lbg-audio1-html5 allows SQL Injection.This issue affects Chameleon HTML5 Audio Player With/Wi…

    LambertGroup Chameleon HTML5 Audio Player With/Without Playlist
  • High 7.6
    CVE-2025-47567

    WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player & FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player & FullScreen…

    LambertGroup Video Player & FullScreen Video Background
  • High 7.5
    CVE-2025-3103

    CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon <= 2.4 - Unauthenticated Arbitrary File Read

    The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vulnerable to arbitrary file read due to insufficient file path validation in the 'history.php' file in all versions up to, and including, 2.…

    LambertGroup CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon Web / CMS