Vulnerabilities in LambertGroup

61 results
Vexday analysis

Com 61 CVEs catalogadas e nenhum registro de exploração ativa no CISA KEV, o perfil de risco do LambertGroup situa-se abaixo da média geral do catálogo, sem ocorrências críticas nem provas de conceito públicas conhecidas no momento. A ausência de vulnerabilidades surgidas nos últimos 90 dias reforça um quadro de baixa atividade recente, embora o volume acumulado de falhas mereça acompanhamento contínuo. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), categoria que, apesar de raramente associada a exploração em larga escala, pode viabilizar ataques de sequestro de sessão e injeção de conteúdo malicioso em contextos web. A CVE mais perigosa ativa no momento, CVE-2025-31070, apresenta EPSS de 0,0048, indicando probabilidade muito baixa de exploração no curto prazo, mas deve ser monitorada caso o cenário de ameaças evolua.

CVE-2025-31070HIGHWordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin <= 2.5 - Arbitrary File Download vulnerabilityEPSS 0.5%CVE-2025-31635HIGHWordPress CLEVER plugin <= 2.6 - Arbitrary File Download VulnerabilityEPSS 0.5%CVE-2025-47567HIGHWordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-31637HIGHWordPress SHOUT plugin <= 3.5.3 - SQL Injection VulnerabilityEPSS 0.4%CVE-2025-31641HIGHWordPress UberSlider plugin <= 2.3 - SQL Injection VulnerabilityEPSS 0.4%CVE-2025-31640HIGHWordPress Magic Responsive Slider and Carousel WordPress plugin < 1.6 - SQL Injection VulnerabilityEPSS 0.4%CVE-2025-3103HIGHCLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon <= 2.4 - Unauthenticated Arbitrary File ReadEPSS 0.4%CVE-2025-67518HIGHWordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-62093HIGHWordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-31928HIGHWordPress Multimedia Responsive Carousel with Image Video Audio Support plugin <= 2.6.0 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-32306HIGHWordPress Radio Player Shoutcast & Icecast theme <= 4.4.6 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-32290HIGHWordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-31926HIGHWordPress Sticky Radio Player plugin <= 3.4 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-32301HIGHWordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-32287HIGHWordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-32307HIGHWordPress Chameleon HTML5 Audio Player With/Without Playlist plugin <= 3.5.6 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-47666HIGHWordPress Image&Video FullScreen Background plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-32123HIGHWordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-30626HIGHWordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53564HIGHWordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%