Skip to contentOxygenz Clipbucket vulnerabilities
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data ExfiltrationCVE-2026-32321Public exploit8.8 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 has IDOR in Collection Item ManagementCVE-2026-283545.7 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 has Stored XSS via Collection nameCVE-2026-269972.0 Low
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 enables internal network scans via an SSRF vulnerabilityCVE-2026-260055.0 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race ConditionCVE-2026-257289.3 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 Vulnerable to Blind SQL Injection through Channel CommentsCVE-2026-218759.8 Critical
- oxygenz clipbucketClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or...CVE-2025-674189.8 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 Unauthenticated Object Flagging VulnerabilityCVE-2025-651136.5 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 is vulnerable to password reset link manipulationCVE-2025-627096.8 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection NameCVE-2025-643385.1 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5: Stored XSS Vulnerability in Manage PlaylistsCVE-2025-643397.2 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo TitleCVE-2025-643367.2 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5: SQL Injection possible through ClipBucket Custom Fields pluginCVE-2025-641146.5 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5: Stored XSS via Collection TagsCVE-2025-627155.3 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 executes arbitrary PHP codeCVE-2025-62429Public exploit7.2 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 stored XSS via video/photo fieldsCVE-2025-624305.4 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket path traversal vulnerability in template editor allows arbitrary file read and writeCVE-2025-624246.7 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Blind SQL injection in the Admin PanelCVE-2025-624236.7 Medium
- oxygenz clipbucketAn issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit...CVE-2025-55912Public exploit7.3 High
- oxygenz clipbucketAn issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the...CVE-2025-55911Public exploit6.5 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Playlist Cover File Upload to Remote Code ExecutionCVE-2025-216249.8 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Unauthenticated Template Directory Update to Denial-of-ServiceCVE-2025-216237.5 High
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket V5 Avatar URL Path Traversal to Arbitrary File DeleteCVE-2025-216227.5 High
- macwarrior clipbucket-v5, oxygenz clipbucket, clipbucket clickbucket +2 moreUntrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199CVE-2024-541359.8 Critical
- macwarrior clipbucket-v5, oxygenz clipbucket, clipbucket clickbucket +2 moreUntrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and BelowCVE-2024-541369.8 Critical