286 matches found
CVE-2025-32245
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Apollo allows SQL Injection. This issue affects Apollo: from n/a through 3.6.3...
CVE-2025-32287 WordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows SQL Injection.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.7...
CVE-2025-32290
CVE-2025-32290 concerns WordPress Sticky HTML5 Music Player
CVE-2025-32290 WordPress Sticky HTML5 Music Player <= 3.1.6 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Sticky HTML5 Music Player allows SQL Injection. This issue affects Sticky HTML5 Music Player: from n/a through 3.1.6...
CVE-2025-32287 WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist allows SQL Injection. This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through 3.5.7...
CVE-2025-32287
CVE-2025-32287 affects the WordPress plugin Responsive HTML5 Audio Player PRO With Playlist. Affected versions:
CVE-2025-32290 WordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Sticky HTML5 Music Player lbg-audio3-html5 allows SQL Injection.This issue affects Sticky HTML5 Music Player: from n/a through = 3.1.6...
CVE-2025-32301 WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown Pro WP Plugin allows SQL Injection. This issue affects CountDown Pro WP Plugin: from n/a through 2.7...
CVE-2025-32306 WordPress Radio Player Shoutcast & Icecast WordPress Plugin <= 4.4.6 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Radio Player Shoutcast & Icecast WordPress Plugin allows Blind SQL Injection. This issue affects Radio Player Shoutcast & Icecast WordPress Plugin: from n/a through 4.4.6...
CVE-2025-32301
CVE-2025-32301 : LambertGroup CountDown Pro WP Plugin (<= 2.7) has an SQL Injection vulnerability due to improper neutralization of input in SQL commands. The CVSS v3.1 score is 8.5 (HIGH) with NETWORK attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and the impact on confidenti...
CVE-2025-32306
CVE-2025-32306 relates to an SQL Injection in the WordPress plugin LambertGroup Radio Player Shoutcast & Icecast . Root cause: Improper Neutralization of Special Elements used in an SQL Command . Affected: plugin versions through 4.4.6 (n/a to 4.4.6). Reported as a blind SQL injection vector. Imp...
CVE-2025-32301 WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown Pro WP Plugin circularcountdown allows SQL Injection.This issue affects CountDown Pro WP Plugin: from n/a through = 2.7...
CVE-2025-32307
CVE-2025-32307 affects LambertGroup Chameleon HTML5 Audio Player With/Without Playlist (plugin slug lbg-audio1-html5), vulnerable through version 3.5.6 due to improper neutralization of special elements in SQL commands (SQL Injection). The CVE’s technical details in connected sources confirm an S...
CVE-2025-47567 WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Video Player & FullScreen Video Background allows Blind SQL Injection. This issue affects Video Player & FullScreen Video Background: from n/a through 2.4.1...
CVE-2025-47567
CVE-2025-47567 affects WordPress Video Player & FullScreen Video Background (versions
CVE-2025-47567 WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Video Player & FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player & FullScreen Video Background: from n/a through =...
PT-2025-21677 · Lambertgroup · Uberslider
Name of the Vulnerable Software and Affected Versions: LambertGroup UberSlider versions n/a through 2.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to exploit the system...
PT-2025-21683 · Unknown · Lambertgroup Multimedia Responsive Carousel With Image Video Audio Support
Name of the Vulnerable Software and Affected Versions: LambertGroup Multimedia Responsive Carousel with Image Video Audio Support versions through 2.6.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command...
PT-2025-21691 · WordPress · Lambertgroup Countdown Pro Wp Plugin
Name of the Vulnerable Software and Affected Versions: LambertGroup CountDown Pro WP Plugin versions n/a through 2.7 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
PT-2025-21686 · Unknown · Lambertgroup Responsive Html5 Audio Player Pro With Playlist
Name of the Vulnerable Software and Affected Versions: LambertGroup Responsive HTML5 Audio Player PRO With Playlist versions prior to 3.5.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows fo...