Priority MEDIUM 40
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER lbg-audio11-html5-shoutcast_history allows Path Traversal.This issue affects CLEVER: from n/a through <=…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00564 · Published 2025-06-09 · No fix listed CWE-22
Priority MEDIUM 40
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg-cleverbakery allows Path Traversal.This issue affects HTML…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00557 · Published 2025-07-16 · No fix listed CWE-22
Priority LOW 39
The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vulnerable to arbitrary file read due to insufficient file path validation in the 'history.php' file i…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00398 · Published 2025-04-19 · No fix listed CWE-73
Priority LOW 38
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter top_bar_promoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00243 · Published 2025-12-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Accordion Slider PRO accordion_slider_pro allows Blind SQL Injection.This issue affects Accordion Slider…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2025-12-09 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_slider allows SQL Injection.This issue affects…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00309 · Published 2025-12-09 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Chameleon HTML5 Audio Player With/Without Playlist lbg-audio1-html5 allows SQL Injection.This issue affec…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast & Icecast WordPress Plugin audio4-html5 allows Blind SQL Injection.This issue affe…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown Pro WP Plugin circular_countdown allows SQL Injection.This issue affects CountDown Pro WP Plugi…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky HTML5 Music Player lbg-audio3-html5 allows SQL Injection.This issue affects Sticky HTML5 Music Pla…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows SQL Injection.This issue affects…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multimedia Responsive Carousel with Image Video Audio Support multimedia-carousel allows SQL Injection.Th…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcast_sticky allows SQL Injection.This issue affects Sticky Radi…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup UberSlider uber-classic allows SQL Injection.This issue affects UberSlider: from n/a through < 2.6.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.0044 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic-carousel allows SQL Injection.This issue affects Mag…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.0044 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup SHOUT lbg-audio8-html5-radio_ads allows SQL Injection.This issue affects SHOUT: from n/a through <= 3.5.3…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.0044 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 36
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00251 · Published 2025-12-16 · No fix listed CWE-89
Priority LOW 36
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown With Image or Video Background countdown_with_background allows Blind SQL Injection.This issue…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00243 · Published 2025-12-16 · No fix listed CWE-89
Priority LOW 36
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows SQL Injection.This issue affects AllInOne - Ban…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00267 · Published 2025-09-26 · No fix listed CWE-89
Priority LOW 36
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue a…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00267 · Published 2025-09-26 · No fix listed CWE-89
Priority LOW 36
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.T…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00267 · Published 2025-09-26 · No fix listed CWE-89
Priority LOW 36
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.T…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00267 · Published 2025-09-26 · No fix listed CWE-89
Priority LOW 34
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player & FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This…
CVSS 3.1HIGH 7.6· Network · High privileges · No interaction · EPSS 0.00435 · Published 2025-05-16 · No fix listed CWE-89
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Reflected XSS.This is…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00214 · Published 2026-03-05 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows Reflected XSS.This issue affects LBG Zoominoutslider: from…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00214 · Published 2026-03-05 · No fix listed CWE-79
Load more