CL
Product
Clipbucket
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 8Medium 11Low 0
Watch
Add Clipbucket to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21875 | 9.8 | Jan 7 | ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments Affected: 5.3 before 5.5.2-191 |
| CVE-2025-67418 | 9.8 | Dec 22 | ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials Affected: 5.3 through 5.5.2 |
| CVE-2025-21624 | 9.8 | Jan 7 | ClipBucket V5 Playlist Cover File Upload to Remote Code Execution Affected: 5.3 before 5.5.1-239 |
| CVE-2024-54136 | 9.8 | Dec 6 | Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below Affected: 5.5.1-141 before 5.5.1-200 |
| CVE-2025-21622 | 9.1 | Jan 7 | ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete Affected: 5.3 before 5.5.1-237 |
| CVE-2025-64338 | 9.0 | Nov 7 | ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name Affected: 5.3 before 5.5.2-157 |
| CVE-2026-32321 | 8.8 | Mar 18 | ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration Affected: 5.3 before 5.5.3-80 |
| CVE-2025-62709 | 8.8 | Nov 20 | ClipBucket v5 is vulnerable to password reset link manipulation Affected: 5.3 before 5.5.2-163 |
| CVE-2024-54135 | 8.8 | Dec 6 | Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199 Affected: 2.0 before 5.5.1-200 |
| CVE-2026-25728 | 7.5 | Feb 10 | ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition Affected: 5.3 before 5.5.3-40 |
| CVE-2025-21623 | 7.5 | Jan 7 | ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service Affected: 5.3 before 5.5.1-238 |
| CVE-2025-55912 | 7.3 | Sep 18 | An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary files without any… Affected: through 5.5.0 |
| CVE-2025-62429 | 7.2 | Oct 20 | ClipBucket v5 executes arbitrary PHP code Affected: 5.3 before 5.5.2-147 |
| CVE-2025-62423 | 7.2 | Oct 16 | ClipBucket V5 Blind SQL injection in the Admin Panel Affected: 5.3 before 5.5.2-142 |
| CVE-2026-28354 | 6.5 | Feb 27 | ClipBucket v5 has IDOR in Collection Item Management Affected: 5.3 before 5.5.3-59 |
| CVE-2025-65113 | 6.5 | Nov 29 | ClipBucket v5 Unauthenticated Object Flagging Vulnerability Affected: 5.3 before 5.5.2-164 |
| CVE-2025-64114 | 6.5 | Nov 5 | ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin Affected: 5.3 before 5.5.2-152 |
| CVE-2025-62424 | 6.5 | Oct 17 | ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write Affected: 5.3 before 5.5.2-147 |
| CVE-2025-55911 | 6.5 | Sep 18 | An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter Affected: before 5.5.2-90 |
| CVE-2026-26997 | 5.4 | Feb 27 | ClipBucket v5 has Stored XSS via Collection name Affected: 5.3 before 5.5.3-59 |
| CVE-2025-64339 | 5.4 | Nov 7 | ClipBucket v5: Stored XSS Vulnerability in Manage Playlists Affected: 5.3 before 5.5.2-147 |
| CVE-2025-64336 | 5.4 | Nov 7 | ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title Affected: 5.3 before 5.5.2-147 |
| CVE-2025-62715 | 5.4 | Nov 4 | ClipBucket v5: Stored XSS via Collection Tags Affected: 5.3 before 5.5.2-157 |
| CVE-2025-62430 | 5.4 | Oct 17 | ClipBucket v5 stored XSS via video/photo fields Affected: 5.3 before 5.5.2-146 |
| CVE-2026-26005 | 5.0 | Feb 12 | ClipBucket v5 enables internal network scans via an SSRF vulnerability Affected: 5.3 before 5.5.3-45 |
Showing 25