CL
Product
Clipbucket
by Oxygenz · last CVE Mar 18, 2026
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 8Medium 11Low 0
Watch

Add Clipbucket to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-28354
6.5
0%
Feb 27
ClipBucket v5 has IDOR in Collection Item Management
Affected: 5.3 before 5.5.3-59
CVE-2025-65113
6.5
0%
Nov 29
ClipBucket v5 Unauthenticated Object Flagging Vulnerability
Affected: 5.3 before 5.5.2-164
CVE-2025-64114
6.5
0%
Nov 5
ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin
Affected: 5.3 before 5.5.2-152
CVE-2025-62424
6.5
1%
Oct 17
ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write
Affected: 5.3 before 5.5.2-147
CVE-2025-55911
6.5
1%
Sep 18
An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter
Affected: before 5.5.2-90
CVE-2026-26997
5.4
0%
Feb 27
ClipBucket v5 has Stored XSS via Collection name
Affected: 5.3 before 5.5.3-59
CVE-2025-64339
5.4
0%
Nov 7
ClipBucket v5: Stored XSS Vulnerability in Manage Playlists
Affected: 5.3 before 5.5.2-147
CVE-2025-64336
5.4
0%
Nov 7
ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title
Affected: 5.3 before 5.5.2-147
CVE-2025-62715
5.4
0%
Nov 4
ClipBucket v5: Stored XSS via Collection Tags
Affected: 5.3 before 5.5.2-157
CVE-2025-62430
5.4
0%
Oct 17
ClipBucket v5 stored XSS via video/photo fields
Affected: 5.3 before 5.5.2-146
CVE-2026-26005
5.0
0%
Feb 12
ClipBucket v5 enables internal network scans via an SSRF vulnerability
Affected: 5.3 before 5.5.3-45
Showing 11