Cross-site Scripting Vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder
CVE-2025-30626
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 14 August 2025
What is CVE-2025-30626?
A vulnerability exists in the LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder due to improper input neutralization during web page generation. This flaw allows attackers to execute reflected cross-site scripting (XSS) exploits, potentially enabling them to inject malicious scripts into web pages viewed by users. Affected versions range from unversioned up to 2.1, making it imperative for users to apply necessary security measures to mitigate risks associated with this flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved