Skip to contentMacwarrior Clipbucket-v5 vulnerabilities
- macwarrior clipbucket-v5ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val ParameterCVE-2026-1106272.1 Low
- macwarrior clipbucket-v5ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.phpCVE-2026-1106265.1 Medium
- macwarrior clipbucket-v5ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.phpCVE-2026-1106255.1 Medium
- macwarrior clipbucket-v5ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete ParameterCVE-2026-1037668.6 High
- macwarrior clipbucket-v5ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id ParameterCVE-2026-1025707.0 High
- macwarrior clipbucket-v5ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid ParameterCVE-2026-1025697.0 High
- macwarrior clipbucket-v5ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.phpCVE-2026-1003728.6 High
- macwarrior clipbucket-v5ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.phpCVE-2026-962728.7 High
- macwarrior clipbucket-v5ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query ParametersCVE-2026-958125.3 Medium
- macwarrior clipbucket-v5ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload EndpointCVE-2026-779298.7 High
- macwarrior clipbucket-v5ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion EndpointCVE-2026-779287.1 High
- macwarrior clipbucket-v5ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion EndpointCVE-2026-779277.1 High
- macwarrior clipbucket-v5ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath ParameterCVE-2026-801389.2 Critical
- macwarrior clipbucket-v5ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle OverwriteCVE-2026-494824.3 Medium
- macwarrior clipbucket-v5ClipBucket: IDOR in videos subtitle editorCVE-2026-472386.5 Medium
- macwarrior clipbucket-v5ClipBucket: Blind SQL Injection in progress_video.phpCVE-2026-450609.8 Critical
- macwarrior clipbucket-v5ClipBucket: Remote Play URL Command InjectionCVE-2026-428469.8 Critical
- macwarrior clipbucket-v5ClipBucket: Blind SQL Injection in subtitle_edit.phpCVE-2026-454188.8 High
- macwarrior clipbucket-v5ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2026-428477.1 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data ExfiltrationCVE-2026-32321Public exploit8.8 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 has IDOR in Collection Item ManagementCVE-2026-283545.7 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 has Stored XSS via Collection nameCVE-2026-269972.0 Low
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 enables internal network scans via an SSRF vulnerabilityCVE-2026-260055.0 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race ConditionCVE-2026-257289.3 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 Vulnerable to Blind SQL Injection through Channel CommentsCVE-2026-218759.8 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 Unauthenticated Object Flagging VulnerabilityCVE-2025-651136.5 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 is vulnerable to password reset link manipulationCVE-2025-627096.8 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection NameCVE-2025-643385.1 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5: Stored XSS Vulnerability in Manage PlaylistsCVE-2025-643397.2 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo TitleCVE-2025-643367.2 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5: SQL Injection possible through ClipBucket Custom Fields pluginCVE-2025-641146.5 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5: Stored XSS via Collection TagsCVE-2025-627155.3 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 executes arbitrary PHP codeCVE-2025-62429Public exploit7.2 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 stored XSS via video/photo fieldsCVE-2025-624305.4 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket path traversal vulnerability in template editor allows arbitrary file read and writeCVE-2025-624246.7 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Blind SQL injection in the Admin PanelCVE-2025-624236.7 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Playlist Cover File Upload to Remote Code ExecutionCVE-2025-216249.8 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Unauthenticated Template Directory Update to Denial-of-ServiceCVE-2025-216237.5 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Avatar URL Path Traversal to Arbitrary File DeleteCVE-2025-216227.5 High
- macwarrior clipbucket-v5, oxygenz clipbucket, clipbucket clickbucket +2 moreUntrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199CVE-2024-541359.8 Critical
- macwarrior clipbucket-v5, oxygenz clipbucket, clipbucket clickbucket +2 moreUntrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and BelowCVE-2024-541369.8 Critical