Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

LambertGroup — Vulnerabilities & Security Advisories 61

Browse all 61 CVE security advisories affecting LambertGroup. AI-powered Chinese analysis, POCs, and references for each vulnerability.

LambertGroup operates primarily as a provider of enterprise resource planning and supply chain management software, facilitating complex logistical operations for mid-to-large-sized organizations. Security audits have identified a significant volume of vulnerabilities, with 61 Common Vulnerabilities and Exposures (CVEs) currently on record, indicating a history of inconsistent patch management or legacy code issues. The most prevalent vulnerability classes affecting their platforms include remote code execution, cross-site scripting, and privilege escalation flaws, which often stem from inadequate input validation and improper access controls. These defects have historically allowed attackers to bypass authentication mechanisms or execute arbitrary commands on affected servers. While no single catastrophic data breach has been publicly attributed solely to LambertGroup, the cumulative nature of these CVEs suggests systemic weaknesses in their software development lifecycle. Organizations utilizing their solutions must prioritize rigorous network segmentation and continuous monitoring to mitigate the risk of exploitation inherent in their current software architecture.

CVE ID Title CVSS Severity Published
CVE-2025-48159 WordPress Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability — Youtube Vimeo Video Player and Slider WP Plugin CWE-79 7.1 High 2025-08-20
CVE-2025-48163 WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability — SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support CWE-79 7.1 High 2025-08-20
CVE-2025-48168 WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability — Apollo - Sticky Full Width HTML5 Audio Player CWE-79 7.1 High 2025-08-20
CVE-2025-48170 WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability — Universal Video Player - Addon for WPBakery Page Builder CWE-79 7.1 High 2025-08-20
CVE-2025-53205 WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability — Radio Player Shoutcast & Icecast CWE-79 7.1 High 2025-08-20
CVE-2025-53212 WordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) Vulnerability — Revolution Video Player With Bottom Playlist CWE-79 7.1 High 2025-08-20
CVE-2025-53559 WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability — Universal Video Player - Addon for WPBakery Page Builder CWE-79 7.1 High 2025-08-20
CVE-2025-53562 WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability — Universal Video Player - Addon for WPBakery Page Builder CWE-79 7.1 High 2025-08-20
CVE-2025-53563 WordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) Vulnerability — Youtube Vimeo Video Player and Slider CWE-79 7.1 High 2025-08-20
CVE-2025-53564 WordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability — HTML5 Radio Player - WPBakery Page Builder Addon CWE-79 7.1 High 2025-08-20
CVE-2025-54056 WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability — Responsive HTML5 Audio Player PRO With Playlist CWE-79 7.1 High 2025-08-20
CVE-2025-30626 WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) Vulnerability — Multimedia Playlist Slider Addon for WPBakery Page Builder CWE-79 7.1 High 2025-08-14
CVE-2025-31070 WordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin <= 2.5 - Arbitrary File Download vulnerability — HTML5 Radio Player - WPBakery Page Builder Addon CWE-22 7.5 High 2025-07-16
CVE-2025-31057 WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability — Universal Video Player CWE-79 7.1 High 2025-06-09
CVE-2025-31058 WordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerability — Revolution Video Player CWE-79 7.1 High 2025-06-09
CVE-2025-31426 WordPress Sticky Radio Player plugin <= 3.4 - Reflected Cross Site Scripting (XSS) vulnerability — Sticky Radio Player CWE-79 7.1 High 2025-06-09
CVE-2025-31635 WordPress CLEVER plugin <= 2.6 - Arbitrary File Download Vulnerability — CLEVER CWE-22 7.5 High 2025-06-09
CVE-2025-31917 WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability — Universal Video Player CWE-79 7.1 High 2025-06-09
CVE-2025-31925 WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability — SHOUT CWE-79 7.1 High 2025-06-09
CVE-2025-31637 WordPress SHOUT plugin <= 3.5.3 - SQL Injection Vulnerability — SHOUT CWE-89 8.5 High 2025-05-16
CVE-2025-31640 WordPress Magic Responsive Slider and Carousel WordPress plugin < 1.6 - SQL Injection Vulnerability — Magic Responsive Slider and Carousel WordPress CWE-89 8.5 High 2025-05-16
CVE-2025-31641 WordPress UberSlider plugin <= 2.3 - SQL Injection Vulnerability — UberSlider CWE-89 8.5 High 2025-05-16
CVE-2025-31926 WordPress Sticky Radio Player plugin <= 3.4 - SQL Injection Vulnerability — Sticky Radio Player CWE-89 8.5 High 2025-05-16
CVE-2025-31928 WordPress Multimedia Responsive Carousel with Image Video Audio Support plugin <= 2.6.0 - SQL Injection Vulnerability — Multimedia Responsive Carousel with Image Video Audio Support CWE-89 8.5 High 2025-05-16
CVE-2025-32287 WordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection Vulnerability — Responsive HTML5 Audio Player PRO With Playlist CWE-89 8.5 High 2025-05-16
CVE-2025-32290 WordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection Vulnerability — Sticky HTML5 Music Player CWE-89 8.5 High 2025-05-16
CVE-2025-32301 WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability — CountDown Pro WP Plugin CWE-89 8.5 High 2025-05-16
CVE-2025-32306 WordPress Radio Player Shoutcast & Icecast theme <= 4.4.6 - SQL Injection Vulnerability — Radio Player Shoutcast & Icecast WordPress Plugin CWE-89 8.5 High 2025-05-16
CVE-2025-32307 WordPress Chameleon HTML5 Audio Player With/Without Playlist plugin <= 3.5.6 - SQL Injection Vulnerability — Chameleon HTML5 Audio Player With/Without Playlist CWE-89 8.5 High 2025-05-16
CVE-2025-47567 WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability — Video Player & FullScreen Video Background CWE-89 7.6 High 2025-05-16

This page lists every published CVE security advisory associated with LambertGroup. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.