Skip to contentLambertgroup vulnerabilities
Newest
- lambertgroup universal video playerWordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-319177.1 High
- lambertgroup shoutWordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-319257.1 High
- lambertgroup shoutWordPress SHOUT plugin <= 3.5.3 - SQL Injection VulnerabilityCVE-2025-316378.5 High
- lambertgroup ubersliderWordPress UberSlider plugin <= 2.3 - SQL Injection VulnerabilityCVE-2025-316418.5 High
- lambertgroup magic responsive slider and carousel wordpressWordPress Magic Responsive Slider and Carousel WordPress plugin < 1.6 - SQL Injection VulnerabilityCVE-2025-316408.5 High
- lambertgroup multimedia responsive carousel with image video audio supportWordPress Multimedia Responsive Carousel with Image Video Audio Support plugin <= 2.6.0 - SQL Injection VulnerabilityCVE-2025-319288.5 High
- lambertgroup sticky radio playerWordPress Sticky Radio Player plugin <= 3.4 - SQL Injection VulnerabilityCVE-2025-319268.5 High
- lambertgroup sticky html5 music playerWordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection VulnerabilityCVE-2025-322908.5 High
- lambertgroup responsive html5 audio player pro with playlistWordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection VulnerabilityCVE-2025-322878.5 High
- lambertgroup radio player shoutcast & icecast wordpress pluginWordPress Radio Player Shoutcast & Icecast theme <= 4.4.6 - SQL Injection VulnerabilityCVE-2025-323068.5 High
- lambertgroup countdown pro wp pluginWordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection VulnerabilityCVE-2025-323018.5 High
- lambertgroup chameleon html5 audio player with/without playlistWordPress Chameleon HTML5 Audio Player With/Without Playlist plugin <= 3.5.6 - SQL Injection VulnerabilityCVE-2025-323078.5 High
- lambertgroup video player & fullscreen video backgroundWordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerabilityCVE-2025-475677.6 High
- lambertgroup clever - html5 radio player with history - shoutcast and icecast - elementor widget addonCLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon <= 2.4 - Unauthenticated Arbitrary File ReadCVE-2025-31037.5 High
- gmod apolloGMOD Apollo Generation of Error Message Containing Sensitive InformationCVE-2025-200026.9 Medium
- gmod apolloGMOD Apollo Missing Authentication for Critical FunctionCVE-2025-249249.3 Critical
- gmod apolloGMOD Apollo Relative Path TraversalCVE-2025-234109.3 Critical
- gmod apolloGMOD Apollo Incorrect Privilege AssignmentCVE-2025-210927.1 High
- lambertgroup magic sliderWordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2024-518966.5 Medium
- apolloconfig apolloPotential unauthorized access issue in apollo-portalCVE-2024-43397Fix available4.3 Medium
- apolloconfig apolloApollo Configuration Center users improper authorizationCVE-2022-4962Disputed4.3 Medium
- apolloconfig apolloApollo has potential access control security issue in eurekaCVE-2023-25570Fix available7.5 High
- apolloconfig apolloapollo-portal has potential CSRF issueCVE-2023-25569Fix available5.7 Medium
- abreen apolloabreen Apollo path traversalCVE-2015-100435.5 Medium
- ctrip apolloMissing access control in apollo-adminserviceCVE-2020-15170Fix available7.0 High