# cve.now: Lambertgroup

The newest entries naming Lambertgroup as an affected vendor (up to 200), of 61 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-28112](https://cve.now/CVE-2026-28112.md): WordPress AllInOne - Banner Rotator plugin \<= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-28110](https://cve.now/CVE-2026-28110.md): WordPress LambertGroup - AllInOne - Banner with Playlist plugin \<= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-28109](https://cve.now/CVE-2026-28109.md): WordPress LambertGroup - AllInOne - Content Slider plugin \<= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-28108](https://cve.now/CVE-2026-28108.md): WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin \<= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-28103](https://cve.now/CVE-2026-28103.md): WordPress LBG Zoominoutslider plugin \<= 5.4.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-28102](https://cve.now/CVE-2026-28102.md): WordPress UberSlider Classic plugin \<= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-28101](https://cve.now/CVE-2026-28101.md): WordPress UberSlider MouseInteraction plugin \<= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-28100](https://cve.now/CVE-2026-28100.md): WordPress UberSlider PerpetuumMobile plugin \<= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-28099](https://cve.now/CVE-2026-28099.md): WordPress UberSlider Ultra plugin \<= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-69053](https://cve.now/CVE-2025-69053.md): WordPress Universal Video Player plugin \<= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-69048](https://cve.now/CVE-2025-69048.md): WordPress Universal Video Player plugin \<= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-49066](https://cve.now/CVE-2025-49066.md): WordPress Accordion Slider PRO plugin \<= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-49046](https://cve.now/CVE-2025-49046.md): WordPress xPromoter plugin \<= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-49043](https://cve.now/CVE-2025-49043.md): WordPress Magic Responsive Slider and Carousel WordPress plugin \<= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-48094](https://cve.now/CVE-2025-48094.md): WordPress Magic Slider plugin \<= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-47666](https://cve.now/CVE-2025-47666.md): WordPress Image&Video FullScreen Background plugin \<= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-32123](https://cve.now/CVE-2025-32123.md): WordPress HTML5 Video Player with Playlist & Multiple Skins plugin \<= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-27005](https://cve.now/CVE-2025-27005.md): WordPress HTML5 Video Player plugin \<= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-27004](https://cve.now/CVE-2025-27004.md): WordPress Famous - Responsive Image And Video Grid Gallery WordPress Plugin plugin \<= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-27002](https://cve.now/CVE-2025-27002.md): WordPress CountDown With Image or Video Background plugin \<= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-68056](https://cve.now/CVE-2025-68056.md): WordPress LBG Zoominoutslider plugin \<= 5.4.4 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2025-68054](https://cve.now/CVE-2025-68054.md): WordPress CountDown With Image or Video Background plugin \<= 1.5 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2025-68053](https://cve.now/CVE-2025-68053.md): WordPress xPromoter plugin \<= 1.3.4 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2025-62093](https://cve.now/CVE-2025-62093.md): WordPress Image&Video FullScreen Background plugin \<= 1.6.7 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2025-67518](https://cve.now/CVE-2025-67518.md): WordPress Accordion Slider PRO plugin \<= 1.2 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2025-60110](https://cve.now/CVE-2025-60110.md): WordPress AllInOne - Banner Rotator Plugin \<= 3.8 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-60109](https://cve.now/CVE-2025-60109.md): WordPress LambertGroup - AllInOne - Content Slider Plugin \<= 3.8 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-60108](https://cve.now/CVE-2025-60108.md): WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin \<= 3.8 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-60107](https://cve.now/CVE-2025-60107.md): WordPress LambertGroup - AllInOne - Banner with Playlist Plugin \<= 3.8 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-48154](https://cve.now/CVE-2025-48154.md): WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin \<= 2.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-48159](https://cve.now/CVE-2025-48159.md): WordPress Youtube Vimeo Video Player and Slider WP Plugin \<= 3.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-48163](https://cve.now/CVE-2025-48163.md): WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support \<= 3.5.4 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-48168](https://cve.now/CVE-2025-48168.md): WordPress Apollo - Sticky Full Width HTML5 Audio Player \<= 3.4 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-48170](https://cve.now/CVE-2025-48170.md): WordPress Universal Video Player - Addon for WPBakery Page Builder \<= 3.2.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-53205](https://cve.now/CVE-2025-53205.md): WordPress Radio Player Shoutcast & Icecast \<= 4.4.7 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-53212](https://cve.now/CVE-2025-53212.md): WordPress Revolution Video Player With Bottom Playlist \<= 2.9.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-53559](https://cve.now/CVE-2025-53559.md): WordPress Universal Video Player - Addon for WPBakery Page Builder \<= 3.2.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-53562](https://cve.now/CVE-2025-53562.md): WordPress Universal Video Player - Addon for WPBakery Page Builder \<= 3.2.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-53563](https://cve.now/CVE-2025-53563.md): WordPress Youtube Vimeo Video Player and Slider \<= 3.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-53564](https://cve.now/CVE-2025-53564.md): WordPress HTML5 Radio Player - WPBakery Page Builder Addon \<= 2.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-54056](https://cve.now/CVE-2025-54056.md): WordPress Responsive HTML5 Audio Player PRO With Playlist \<= 3.5.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-30626](https://cve.now/CVE-2025-30626.md): WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder \<= 2.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-31070](https://cve.now/CVE-2025-31070.md): WordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin \<= 2.5 - Arbitrary File Download vulnerability (CVSS 7.5)
- [CVE-2025-31057](https://cve.now/CVE-2025-31057.md): WordPress Universal Video Player plugin \<= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-31058](https://cve.now/CVE-2025-31058.md): WordPress Revolution Video Player plugin \<= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-31426](https://cve.now/CVE-2025-31426.md): WordPress Sticky Radio Player plugin \<= 3.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-31635](https://cve.now/CVE-2025-31635.md): WordPress CLEVER plugin \<= 2.6 - Arbitrary File Download Vulnerability (CVSS 7.5)
- [CVE-2025-31917](https://cve.now/CVE-2025-31917.md): WordPress Universal Video Player plugin \<= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-31925](https://cve.now/CVE-2025-31925.md): WordPress SHOUT plugin \<= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-31637](https://cve.now/CVE-2025-31637.md): WordPress SHOUT plugin \<= 3.5.3 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-31640](https://cve.now/CVE-2025-31640.md): WordPress Magic Responsive Slider and Carousel WordPress plugin \< 1.6 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-31641](https://cve.now/CVE-2025-31641.md): WordPress UberSlider plugin \<= 2.3 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-31926](https://cve.now/CVE-2025-31926.md): WordPress Sticky Radio Player plugin \<= 3.4 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-31928](https://cve.now/CVE-2025-31928.md): WordPress Multimedia Responsive Carousel with Image Video Audio Support plugin \<= 2.6.0 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-32287](https://cve.now/CVE-2025-32287.md): WordPress Responsive HTML5 Audio Player PRO With Playlist plugin \<= 3.5.7 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-32290](https://cve.now/CVE-2025-32290.md): WordPress Sticky HTML5 Music Player plugin \<= 3.1.6 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-32301](https://cve.now/CVE-2025-32301.md): WordPress CountDown Pro WP Plugin \<= 2.7 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-32306](https://cve.now/CVE-2025-32306.md): WordPress Radio Player Shoutcast & Icecast theme \<= 4.4.6 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-32307](https://cve.now/CVE-2025-32307.md): WordPress Chameleon HTML5 Audio Player With/Without Playlist plugin \<= 3.5.6 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-47567](https://cve.now/CVE-2025-47567.md): WordPress Video Player & FullScreen Video Background plugin \<= 2.4.1 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2025-3103](https://cve.now/CVE-2025-3103.md): CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon \<= 2.4 - Unauthenticated Arbitrary File Read (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/lambertgroup
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.