286 matches found
CVE-2025-32245
CVE-2025-32245 covers a SQL Injection in the WordPress Apollo plugin (
CVE-2025-32290 WordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Sticky HTML5 Music Player lbg-audio3-html5 allows SQL Injection.This issue affects Sticky HTML5 Music Player: from n/a through = 3.1.6...
CVE-2025-32287 WordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows SQL Injection.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.7...
CVE-2025-32287 WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist allows SQL Injection. This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through 3.5.7...
CVE-2025-32290 WordPress Sticky HTML5 Music Player <= 3.1.6 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Sticky HTML5 Music Player allows SQL Injection. This issue affects Sticky HTML5 Music Player: from n/a through 3.1.6...
CVE-2025-32290
CVE-2025-32290 concerns WordPress Sticky HTML5 Music Player
CVE-2025-32287
CVE-2025-32287 affects the WordPress plugin Responsive HTML5 Audio Player PRO With Playlist. Affected versions:
CVE-2025-32306 WordPress Radio Player Shoutcast & Icecast WordPress Plugin <= 4.4.6 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Radio Player Shoutcast & Icecast WordPress Plugin allows Blind SQL Injection. This issue affects Radio Player Shoutcast & Icecast WordPress Plugin: from n/a through 4.4.6...
CVE-2025-32301 WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown Pro WP Plugin circularcountdown allows SQL Injection.This issue affects CountDown Pro WP Plugin: from n/a through = 2.7...
CVE-2025-32301
CVE-2025-32301 : LambertGroup CountDown Pro WP Plugin (<= 2.7) has an SQL Injection vulnerability due to improper neutralization of input in SQL commands. The CVSS v3.1 score is 8.5 (HIGH) with NETWORK attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and the impact on confidenti...
CVE-2025-32306
CVE-2025-32306 relates to an SQL Injection in the WordPress plugin LambertGroup Radio Player Shoutcast & Icecast . Root cause: Improper Neutralization of Special Elements used in an SQL Command . Affected: plugin versions through 4.4.6 (n/a to 4.4.6). Reported as a blind SQL injection vector. Imp...
CVE-2025-32301 WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown Pro WP Plugin allows SQL Injection. This issue affects CountDown Pro WP Plugin: from n/a through 2.7...
CVE-2025-32307
CVE-2025-32307 affects LambertGroup Chameleon HTML5 Audio Player With/Without Playlist (plugin slug lbg-audio1-html5), vulnerable through version 3.5.6 due to improper neutralization of special elements in SQL commands (SQL Injection). The CVE’s technical details in connected sources confirm an S...
CVE-2025-47567
CVE-2025-47567 affects WordPress Video Player & FullScreen Video Background (versions
CVE-2025-47567 WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Video Player & FullScreen Video Background allows Blind SQL Injection. This issue affects Video Player & FullScreen Video Background: from n/a through 2.4.1...
CVE-2025-47567 WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Video Player & FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player & FullScreen Video Background: from n/a through =...
PT-2025-21713 · Unknown · Lambertgroup Video Player & Fullscreen Video Background
Name of the Vulnerable Software and Affected Versions: LambertGroup Video Player & FullScreen Video Background versions 2.4.1 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection. This allows for Blind...
PT-2025-21682 · Unknown · Lambertgroup Sticky Radio Player
Name of the Vulnerable Software and Affected Versions: LambertGroup Sticky Radio Player versions n/a through 3.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
PT-2025-21685 · Lambertgroup · Lambertgroup Apollo
Name of the Vulnerable Software and Affected Versions: LambertGroup Apollo versions through 3.6.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. To mitigate the...
PT-2025-21691 · WordPress · Lambertgroup Countdown Pro Wp Plugin
Name of the Vulnerable Software and Affected Versions: LambertGroup CountDown Pro WP Plugin versions n/a through 2.7 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...