Skip to content
BackEsc
Sign in

LambertGroup · weakness class

SQL Injection

20 CVEs

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

  1. WordPress UberSlider plugin <= 2.3 - SQL Injection VulnerabilityCVE-2025-31641LambertGroup · CVSS 8.5 · 0.4% likely

    CWE-89

  2. WordPress Magic Responsive Slider and Carousel WordPress plugin < 1.6 - SQL Injection VulnerabilityCVE-2025-31640LambertGroup · CVSS 8.5 · 0.4% likely

    CWE-89

  3. WordPress SHOUT plugin <= 3.5.3 - SQL Injection VulnerabilityCVE-2025-31637LambertGroup · CVSS 8.5 · 0.4% likely

    CWE-89

  4. WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerabilityCVE-2025-47567LambertGroup · CVSS 7.6 · 0.4% likely

    CWE-89

  5. WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerabilityCVE-2025-67518LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  6. WordPress Chameleon HTML5 Audio Player With/Without Playlist plugin <= 3.5.6 - SQL Injection VulnerabilityCVE-2025-32307LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  7. WordPress Radio Player Shoutcast & Icecast theme <= 4.4.6 - SQL Injection VulnerabilityCVE-2025-32306LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  8. WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection VulnerabilityCVE-2025-32301LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  9. WordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection VulnerabilityCVE-2025-32290LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  10. WordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection VulnerabilityCVE-2025-32287LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  11. WordPress Multimedia Responsive Carousel with Image Video Audio Support plugin <= 2.6.0 - SQL Injection VulnerabilityCVE-2025-31928LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  12. WordPress Sticky Radio Player plugin <= 3.4 - SQL Injection VulnerabilityCVE-2025-31926LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  13. WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerabilityCVE-2025-62093LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  14. WordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection VulnerabilityCVE-2025-60110LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  15. WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection VulnerabilityCVE-2025-60109LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  16. WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection VulnerabilityCVE-2025-60108LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  17. WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection VulnerabilityCVE-2025-60107LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  18. WordPress LBG Zoominoutslider plugin <= 5.4.4 - SQL Injection vulnerabilityCVE-2025-68056LambertGroup · CVSS 8.5 · 0.3% likely

    CWE-89

  19. WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerabilityCVE-2025-68054LambertGroup · CVSS 8.5 · 0.2% likely

    CWE-89

  20. WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerabilityCVE-2025-68053LambertGroup · CVSS 8.5 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in