Skip to content
Macwarrior vulnerabilities
Newest
-
macwarrior clipbucket-v5
ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter
CVE-2026-110627
2.1 Low
-
macwarrior clipbucket-v5
ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php
CVE-2026-110626
5.1 Medium
-
macwarrior clipbucket-v5
ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php
CVE-2026-110625
5.1 Medium
-
macwarrior clipbucket-v5
ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter
CVE-2026-103766
8.6 High
-
macwarrior clipbucket-v5
ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter
CVE-2026-102570
7.0 High
-
macwarrior clipbucket-v5
ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter
CVE-2026-102569
7.0 High
-
macwarrior clipbucket-v5
ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php
CVE-2026-100372
8.6 High
-
macwarrior clipbucket-v5
ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php
CVE-2026-96272
8.7 High
-
macwarrior clipbucket-v5
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters
CVE-2026-95812
5.3 Medium
-
macwarrior clipbucket-v5
ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint
CVE-2026-77929
8.7 High
-
macwarrior clipbucket-v5
ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint
CVE-2026-77928
7.1 High
-
macwarrior clipbucket-v5
ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint
CVE-2026-77927
7.1 High
-
macwarrior clipbucket-v5
ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter
CVE-2026-80138
9.2 Critical
-
macwarrior clipbucket-v5
ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite
CVE-2026-49482
4.3 Medium
-
macwarrior clipbucket-v5
ClipBucket: IDOR in videos subtitle editor
CVE-2026-47238
6.5 Medium
-
macwarrior clipbucket-v5
ClipBucket: Blind SQL Injection in progress_video.php
CVE-2026-45060
9.8 Critical
-
macwarrior clipbucket-v5
ClipBucket: Remote Play URL Command Injection
CVE-2026-42846
9.8 Critical
-
macwarrior clipbucket-v5
ClipBucket: Blind SQL Injection in subtitle_edit.php
CVE-2026-45418
8.8 High
-
macwarrior clipbucket-v5
ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-42847
7.1 High
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration
CVE-2026-32321
Public exploit
8.8 High
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 has IDOR in Collection Item Management
CVE-2026-28354
5.7 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 has Stored XSS via Collection name
CVE-2026-26997
2.0 Low
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 enables internal network scans via an SSRF vulnerability
CVE-2026-26005
5.0 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition
CVE-2026-25728
9.3 Critical
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments
CVE-2026-21875
9.8 Critical
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 Unauthenticated Object Flagging Vulnerability
CVE-2025-65113
6.5 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 is vulnerable to password reset link manipulation
CVE-2025-62709
6.8 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name
CVE-2025-64338
5.1 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5: Stored XSS Vulnerability in Manage Playlists
CVE-2025-64339
7.2 High
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title
CVE-2025-64336
7.2 High
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin
CVE-2025-64114
6.5 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5: Stored XSS via Collection Tags
CVE-2025-62715
5.3 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 executes arbitrary PHP code
CVE-2025-62429
Public exploit
7.2 High
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket v5 stored XSS via video/photo fields
CVE-2025-62430
5.4 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write
CVE-2025-62424
6.7 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket V5 Blind SQL injection in the Admin Panel
CVE-2025-62423
6.7 Medium
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket V5 Playlist Cover File Upload to Remote Code Execution
CVE-2025-21624
9.8 Critical
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service
CVE-2025-21623
7.5 High
-
oxygenz clipbucket, macwarrior clipbucket-v5 +1 more
ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete
CVE-2025-21622
7.5 High
-
macwarrior clipbucket-v5, oxygenz clipbucket, clipbucket clickbucket +2 more
Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199
CVE-2024-54135
9.8 Critical
-
macwarrior clipbucket-v5, oxygenz clipbucket, clipbucket clickbucket +2 more
Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below
CVE-2024-54136
9.8 Critical