Skip to content
Lambertgroup vulnerabilities
Newest
-
apolloconfig apollo
Apollo ConfigService access key authentication bypass via raw config file appId parsing
CVE-2026-59955
Fix available
7.5 High
-
apolloconfig apollo
Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
CVE-2026-59954
7.5 High
-
apolloconfig apollo
Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId
CVE-2025-32781
Fix available
6.5 Medium
-
lambertgroup allinone - banner rotator
WordPress AllInOne - Banner Rotator plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28112
7.1 High
-
lambertgroup - allinone - banner with playlist
WordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28110
7.1 High
-
lambertgroup - allinone - content slider
WordPress LambertGroup - AllInOne - Content Slider plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28109
7.1 High
-
lambertgroup - allinone - banner with thumbnails
WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28108
7.1 High
-
lambertgroup lbg zoominoutslider
WordPress LBG Zoominoutslider plugin <= 5.4.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28103
7.1 High
-
lambertgroup uberslider classic
WordPress UberSlider Classic plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28102
7.1 High
-
lambertgroup uberslider mouseinteraction
WordPress UberSlider MouseInteraction plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28101
7.1 High
-
lambertgroup uberslider perpetuummobile
WordPress UberSlider PerpetuumMobile plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28100
7.1 High
-
lambertgroup uberslider ultra
WordPress UberSlider Ultra plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28099
7.1 High
-
lambertgroup universal video player
WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69053
7.1 High
-
lambertgroup universal video player
WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69048
7.1 High
-
lambertgroup accordion slider pro
WordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49066
7.1 High
-
lambertgroup xpromoter
WordPress xPromoter plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49046
7.1 High
-
lambertgroup magic responsive slider and carousel wordpress
WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49043
7.1 High
-
lambertgroup magic slider
WordPress Magic Slider plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-48094
7.1 High
-
lambertgroup image&video fullscreen background
WordPress Image&Video FullScreen Background plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-47666
7.1 High
-
lambertgroup html5 video player with playlist & multiple skins
WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32123
7.1 High
-
html5videoplayer html5 video player
WordPress HTML5 Video Player plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-27005
7.1 High
-
lambertgroup famous - responsive image and video grid gallery wordpress plugin
WordPress Famous - Responsive Image And Video Grid Gallery WordPress Plugin plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-27004
7.1 High
-
lambertgroup countdown with image or video background
WordPress CountDown With Image or Video Background plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-27002
7.1 High
-
lambertgroup lbg zoominoutslider
WordPress LBG Zoominoutslider plugin <= 5.4.4 - SQL Injection vulnerability
CVE-2025-68056
8.5 High
-
lambertgroup countdown with image or video background
WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerability
CVE-2025-68054
8.5 High
-
lambertgroup xpromoter
WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerability
CVE-2025-68053
8.5 High
-
lambertgroup image&video fullscreen background
WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerability
CVE-2025-62093
8.5 High
-
lambertgroup accordion slider pro
WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerability
CVE-2025-67518
8.5 High
-
lambertgroup allinone - banner rotator
WordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60110
8.5 High
-
lambertgroup - allinone - content slider
WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60109
8.5 High
-
lambertgroup - allinone - banner with thumbnails
WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60108
8.5 High
-
lambertgroup - allinone - banner with playlist
WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60107
8.5 High
-
lambertgroup multimedia playlist slider addon for wpbakery page builder
WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48154
7.1 High
-
lambertgroup youtube vimeo video player and slider wp plugin
WordPress Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48159
7.1 High
-
lambertgroup shout - html5 radio player with ads - shoutcast and icecast support
WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48163
7.1 High
-
lambertgroup apollo - sticky full width html5 audio player
WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48168
7.1 High
-
lambertgroup universal video player - addon for wpbakery page builder
WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48170
7.1 High
-
lambertgroup radio player shoutcast & icecast
WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53205
7.1 High
-
lambertgroup revolution video player with bottom playlist
WordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53212
7.1 High
-
lambertgroup universal video player - addon for wpbakery page builder
WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53559
7.1 High
-
lambertgroup universal video player - addon for wpbakery page builder
WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53562
7.1 High
-
lambertgroup html5 radio player - wpbakery page builder addon
WordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53564
7.1 High
-
lambertgroup youtube vimeo video player and slider
WordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53563
7.1 High
-
lambertgroup responsive html5 audio player pro with playlist
WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-54056
7.1 High
-
lambertgroup multimedia playlist slider addon for wpbakery page builder
WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30626
7.1 High
-
lambertgroup html5 radio player - wpbakery page builder addon
WordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin <= 2.5 - Arbitrary File Download vulnerability
CVE-2025-31070
7.5 High
-
lambertgroup universal video player
WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31057
7.1 High
-
lambertgroup revolution video player
WordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31058
7.1 High
-
lambertgroup sticky radio player
WordPress Sticky Radio Player plugin <= 3.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31426
7.1 High
-
lambertgroup clever
WordPress CLEVER plugin <= 2.6 - Arbitrary File Download Vulnerability
CVE-2025-31635
7.5 High
- Show olderLoading…