What’s Vulnerable › Products

MacWarrior clipbucket-v5 vulnerabilities

44 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 39 published in the last 12 months.

Check whether your MacWarrior clipbucket-v5 version is affected

Latest MacWarrior clipbucket-v5 vulnerabilities

• CVE-2026-110627 — ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter (CVSS 4.7)
• CVE-2026-110626 — ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php (CVSS 6.1)
• CVE-2026-110625 — ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php (CVSS 6.1)
• CVE-2026-103766 — ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter (CVSS 7.2)
• CVE-2026-102570 — ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter (CVSS 5.5)
• CVE-2026-102569 — ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter (CVSS 5.5)
• CVE-2026-100372 — ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php (CVSS 7.2)
• CVE-2026-96272 — ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php (CVSS 7.5)
• CVE-2026-95812 — ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters (CVSS 6.1)
• CVE-2026-77929 — ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint (CVSS 8.8)
• CVE-2026-77928 — ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint (CVSS 6.5)
• CVE-2026-77927 — ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint (CVSS 6.5)
• CVE-2026-80138 — ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter (CVSS 9.8)
• CVE-2026-49482 — ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite (CVSS 4.3)
• CVE-2026-47238 — ClipBucket: IDOR in videos subtitle editor (CVSS 6.5)
• CVE-2026-45418 — ClipBucket: Blind SQL Injection in subtitle_edit.php (CVSS 8.8)
• CVE-2026-45060 — ClipBucket: Blind SQL Injection in progress_video.php (CVSS 9.8)
• CVE-2026-42846 — ClipBucket: Remote Play URL Command Injection (CVSS 9.8)
• CVE-2026-42847 — ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVSS 7.1)
• CVE-2026-32321 — ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration (CVSS 8.8)
• CVE-2026-28354 — ClipBucket v5 has IDOR in Collection Item Management (CVSS 6.5)
• CVE-2026-26997 — ClipBucket v5 has Stored XSS via Collection name (CVSS 5.4)
• CVE-2026-26005 — ClipBucket v5 enables internal network scans via an SSRF vulnerability (CVSS 5.0)
• CVE-2026-25728 — ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition (CVSS 7.5)
• CVE-2026-21875 — ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments (CVSS 9.8)