Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

31 matches found

RedhatCVE
RedhatCVE•added 2026/03/06 7:53 a.m.•13 views

CVE-2026-28110

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through =...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/03/05 6:30 a.m.•14 views

EUVD-2026-9764

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through =...

7.1CVSS5.9AI score0.00251EPSS
SaveExploits0References2
NVD
NVD•added 2026/03/05 6:16 a.m.•13 views

CVE-2026-28110

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through =...

7.1CVSS0.00251EPSS
SaveExploits0References1
attackerkb
attackerkb•added 2026/03/05 5:54 a.m.•8 views

CVE-2026-28110

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through =...

5.9AI score0.00251EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/03/05 5:54 a.m.•47 views

CVE-2026-28110 WordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through =...

7.1CVSS0.00251EPSS
SaveExploits0References1
CVE
CVE•added 2026/03/05 5:54 a.m.•33 views

CVE-2026-28110

CVE-2026-28110 is a Reflected Cross-Site Scripting vulnerability in LambertGroup AllInOne - Banner with Playlist (plugin: all-in-one-bannerWithPlaylist) affecting versions up to 3.8. The issue is a Cross-site Scripting flaw that can be triggered via input reflected in the web page; CVSS v3.1 base...

7.1CVSS5.9AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/03/05 12:00 a.m.•20 views

WordPress plugin LambertGroup - AllInOne - Banner with Playlist 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/03/05 12:00 a.m.•15 views

PT-2026-23384

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through =...

5.9AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/03/05 12:00 a.m.•2 views

CVE-2026-28110: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through =...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/02/26 11:50 a.m.•19 views

WordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress LambertGroup - AllInOne - Banner with Playlist plugin = 3.8 - Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin LambertGroup - AllInOne - Banner with Playlist versions = 3.8...

7.1CVSS5.9AI score0.00251EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/01/22 12:00 a.m.•2 views

CVE-2025-32123: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Video Player with Playlist & Multiple Skins lbg-vp2-html5-rightside allows Reflected XSS.This issue affects HTML5 Video Player with Playlist & Multiple Skins: from n/a through =...

7.1CVSS5.8AI score0.00304EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2025/12/18 12:00 a.m.•0 views

CVE-2025-60062: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mmetrodw tPlayer tplayer-html5-audio-player-with-playlist allows SQL Injection.This issue affects tPlayer: from n/a through = 1.2.1.6...

9.3CVSS5.8AI score0.00346EPSS
SaveExploits0References1
EUVD
EUVD•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-31293

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00261EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2025/09/26 8:31 a.m.•3 views

CVE-2025-60107 WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a...

8.5CVSS5.6AI score0.00261EPSS
SaveExploits0References1
CVE
CVE•added 2025/09/26 8:31 a.m.•16 views

CVE-2025-60107

CVE-2025-60107 affects LambertGroup - AllInOne - Banner with Playlist (WordPress plugin). The vulnerability is an SQL Injection (authenticated) in the Banner with Playlist module, exploitable by an authenticated user with Contributor+ privileges; the issue is currently Unpatched per the LambertGr...

8.5CVSS5.9AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2025/09/26 8:31 a.m.•18 views

CVE-2025-60107 WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a...

8.5CVSS0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2025/09/26 12:00 a.m.•8 views

PT-2025-39554

Name of the Vulnerable Software and Affected Versions LambertGroup - AllInOne - Banner with Playlist versions through 3.8 Description The software contains a flaw related to improper handling of special characters within SQL commands, potentially leading to SQL Injection. This allows for Blind SQ...

8.5CVSS7.2AI score0.00261EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2025/09/26 12:00 a.m.•0 views

CVE-2025-60107: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a...

8.5CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/08/20 8:02 a.m.•9 views

CVE-2025-54056 WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist allows Reflected XSS. This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through 3.5.8...

7.1CVSS7.2AI score0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2025/08/20 12:00 a.m.•0 views

CVE-2025-54056: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.8...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Rows per page
Query Builder