Read the docs

LambertGroup

Records61All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high61CVSS 7.0–8.9

Exploited now

LambertGroup records in CISA KEV

No LambertGroup vulnerabilities are listed in CISA KEV.

Records

61 records

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER lbg-audio11-html5-shoutcast_history allows Path Traversal.This issue affects CLEVER: from n/a through <=…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00564 Published 2025-06-09 No fix listed CWE-22
Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg-cleverbakery allows Path Traversal.This issue affects HTML…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00557 Published 2025-07-16 No fix listed CWE-22
Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter top_bar_promoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00243 Published 2025-12-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Blind SQL Injection.This issue affects Accordion Slider…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00314 Published 2025-12-09 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_slider allows SQL Injection.This issue affects…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00309 Published 2025-12-09 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Chameleon HTML5 Audio Player With/Without Playlist lbg-audio1-html5 allows SQL Injection.This issue affec…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast & Icecast WordPress Plugin audio4-html5 allows Blind SQL Injection.This issue affe…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown Pro WP Plugin circular_countdown allows SQL Injection.This issue affects CountDown Pro WP Plugi…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky HTML5 Music Player lbg-audio3-html5 allows SQL Injection.This issue affects Sticky HTML5 Music Pla…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows SQL Injection.This issue affects…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multimedia Responsive Carousel with Image Video Audio Support multimedia-carousel allows SQL Injection.Th…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcast_sticky allows SQL Injection.This issue affects Sticky Radi…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup UberSlider uber-classic allows SQL Injection.This issue affects UberSlider: from n/a through < 2.6.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.0044 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allows SQL Injection.This issue affects Mag…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.0044 Published 2025-05-16 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup SHOUT lbg-audio8-html5-radio_ads allows SQL Injection.This issue affects SHOUT: from n/a through <= 3.5.3…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.0044 Published 2025-05-16 No fix listed CWE-89
Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00251 Published 2025-12-16 No fix listed CWE-89
Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown With Image or Video Background countdown_with_background allows Blind SQL Injection.This issue…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00243 Published 2025-12-16 No fix listed CWE-89
Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows SQL Injection.This issue affects AllInOne - Ban…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00267 Published 2025-09-26 No fix listed CWE-89
Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue a…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00267 Published 2025-09-26 No fix listed CWE-89
Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.T…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00267 Published 2025-09-26 No fix listed CWE-89
Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.T…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00267 Published 2025-09-26 No fix listed CWE-89
Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player & FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00435 Published 2025-05-16 No fix listed CWE-89
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Reflected XSS.This is…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2026-03-05 No fix listed CWE-79
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows Reflected XSS.This issue affects LBG Zoominoutslider: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2026-03-05 No fix listed CWE-79
Load more
Open these records in search →