High · 8.5 CVE-2025-32287 EUVD-2025-15480GHSA-5g6j-mffc-487c

WordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection Vulnerability

Published May 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: LambertGroup Product: Responsive HTML5 Audio Player PRO With Playlist

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows SQL Injection.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through <= 3.5.7.

Affected products

Vendor	Product	Affected	Fixed
LambertGroup	Responsive HTML5 Audio Player PRO With Playlist	≤ 3.5.7	—

References

https://patchstack.com/database/Wordpress/Plugin/lbg-audio2-html5/vulnerability/wordpress-responsive-html5-audio-player-pro-with-playlist-3-5-7-sql-injection-vulnerability?_s_id=cve vdb-entry