Vulnerabilidades em LambertGroup

61 resultados
Análise Vexday

Com 61 CVEs catalogadas e nenhum registro de exploração ativa no CISA KEV, o perfil de risco do LambertGroup situa-se abaixo da média geral do catálogo, sem ocorrências críticas nem provas de conceito públicas conhecidas no momento. A ausência de vulnerabilidades surgidas nos últimos 90 dias reforça um quadro de baixa atividade recente, embora o volume acumulado de falhas mereça acompanhamento contínuo. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), categoria que, apesar de raramente associada a exploração em larga escala, pode viabilizar ataques de sequestro de sessão e injeção de conteúdo malicioso em contextos web. A CVE mais perigosa ativa no momento, CVE-2025-31070, apresenta EPSS de 0,0048, indicando probabilidade muito baixa de exploração no curto prazo, mas deve ser monitorada caso o cenário de ameaças evolua.

CVE-2025-48163HIGHWordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53563HIGHWordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53564HIGHWordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-60110HIGHWordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection VulnerabilityEPSS 0.2%CVE-2025-53212HIGHWordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-60108HIGHWordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection VulnerabilityEPSS 0.2%CVE-2025-60107HIGHWordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection VulnerabilityEPSS 0.2%CVE-2025-60109HIGHWordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection VulnerabilityEPSS 0.2%CVE-2025-49043HIGHWordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-27004HIGHWordPress Famous - Responsive Image And Video Grid Gallery WordPress Plugin plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-48094HIGHWordPress Magic Slider plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31426HIGHWordPress Sticky Radio Player plugin <= 3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31057HIGHWordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31925HIGHWordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31058HIGHWordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31917HIGHWordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49046HIGHWordPress xPromoter plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49066HIGHWordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-48170HIGHWordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-48154HIGHWordPress Multimedia Playlist Slider Addon for WPBakery Page Builder Plugin <= 2.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%