Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Macwarrior
Clipbucket V5

MacWarrior clipbucket-v5 Vulnerabilities: CVEs, CISA KEV & Security Advisories

26 CVEs

MacWarrior clipbucket-v5 Vulnerabilities

CVE security advisories and vulnerability history for clipbucket-v5 by MacWarrior.

26

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

24

Public exploits

With known exploit

7.2

Avg CVSS

2024–2026

Last updated May 14, 2026

Overview

MacWarrior clipbucket-v5 has 26 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 24 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting MacWarrior clipbucket-v5, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of MacWarrior clipbucket-v5's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High8

Medium11

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of MacWarrior clipbucket-v5's CVEs are currently listed in CISA's KEV catalog.

Public exploits

24

24 of MacWarrior clipbucket-v5's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every MacWarrior clipbucket-v5 version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

Fixed in

8e3cf79ce2721fbebde68a05a9a1a6319f086bcc3 CVEs
97b02b8cb780abb1fe21a6c1b1fa39238a559a193 CVEs
76a829c088f0813ab3244a3bd0036111017409b02 CVEs
09536e6e2ca6d69a2ee83190b588c0b8116dd16d1 CVE
1a93532e665217b5d329808ca78e37e59e9f8a9d1 CVE
22329c4675e82c7c95e74024ba247f837ac9e00b1 CVE
2da4c8e41f9e4baf47ff89f8a674fbe9b63ac76d1 CVE
726d68b0c9d4c702dce2691c2759b6bf84a1691f1 CVE
75d663f010cd8569eb9e278f030838174fb301881 CVE
893bfb0f1236c4a59b5e2843ab8d27a1e491b12b1 CVE
a79a326bc5e61864eef62c667b367e11ae9f81a71 CVE

Find a version

26 CVEs

Sort

ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-42847
Public exploit
CWE-89
High · CVSS 7.1
EPSS 0.0% (10th pct)2026-05-14
ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration
CVE-2026-32321
Public exploit
Patch
CWE-89
High · CVSS 8.8
EPSS 0.0% (4th pct)2026-03-18
ClipBucket v5 has IDOR in Collection Item Management
CVE-2026-28354
Public exploit
Patch
CWE-863
Medium · CVSS 5.7
EPSS 0.0% (3th pct)2026-02-27
ClipBucket v5 has Stored XSS via Collection name
CVE-2026-26997
Public exploit
Patch
CWE-79
Low · CVSS 2.0
EPSS 0.0% (3th pct)2026-02-27
ClipBucket v5 enables internal network scans via an SSRF vulnerability
CVE-2026-26005
Public exploit
Patch
CWE-918
Medium · CVSS 5.0
EPSS 0.0% (12th pct)2026-02-12
ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition
CVE-2026-25728
Public exploit
Patch
CWE-367
Critical · CVSS 9.3
EPSS 0.1% (17th pct)2026-02-10
ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments
CVE-2026-21875
Public exploit
Patch
CWE-89
Critical · CVSS 9.8
EPSS 0.1% (19th pct)2026-01-07
Critical vulnerability · 2025-12-22
CVE-2025-67418
Public exploit
CWE-798
Critical · CVSS 9.8
EPSS 0.5% (68th pct)2025-12-22
ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name
CVE-2025-64338
Patch
CWE-79
Medium · CVSS 5.1
EPSS 0.1% (17th pct)2025-12-15
ClipBucket v5 Unauthenticated Object Flagging Vulnerability
CVE-2025-65113
Public exploit
Patch
CWE-770
Medium · CVSS 6.5
EPSS 0.1% (31th pct)2025-11-29
ClipBucket v5 is vulnerable to password reset link manipulation
CVE-2025-62709
Public exploit
Patch
CWE-640
Medium · CVSS 6.8
EPSS 0.0% (14th pct)2025-11-20
ClipBucket v5: Stored XSS Vulnerability in Manage Playlists
CVE-2025-64339
Public exploit
Patch
CWE-79
High · CVSS 7.2
EPSS 0.0% (12th pct)2025-11-07
ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title
CVE-2025-64336
Public exploit
Patch
CWE-269
High · CVSS 7.2
EPSS 0.0% (10th pct)2025-11-07
ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin
CVE-2025-64114
Patch
CWE-89
Medium · CVSS 6.5
EPSS 0.1% (25th pct)2025-11-05
ClipBucket v5: Stored XSS via Collection Tags
CVE-2025-62715
Public exploit
Patch
CWE-79
Medium · CVSS 5.3
EPSS 0.0% (9th pct)2025-11-04
ClipBucket v5 executes arbitrary PHP code
CVE-2025-62429
Public exploit
Patch
CWE-94
High · CVSS 7.2
EPSS 0.3% (51th pct)2025-10-20
ClipBucket v5 stored XSS via video/photo fields
CVE-2025-62430
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.0% (8th pct)2025-10-17
ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write
CVE-2025-62424
Public exploit
Patch
CWE-22
Medium · CVSS 6.7
EPSS 0.1% (16th pct)2025-10-17
ClipBucket V5 Blind SQL injection in the Admin Panel
CVE-2025-62423
Public exploit
Patch
CWE-89
Medium · CVSS 6.7
EPSS 0.0% (15th pct)2025-10-16
High vulnerability · 2025-09-18
CVE-2025-55912
Public exploit
CWE-434
High · CVSS 7.3
EPSS 6.4% (91th pct)2025-09-18
Medium vulnerability · 2025-09-18
CVE-2025-55911
Public exploit
Patch
CWE-77
Medium · CVSS 6.5
EPSS 3.9% (88th pct)2025-09-18
ClipBucket V5 Playlist Cover File Upload to Remote Code Execution
CVE-2025-21624
Public exploit
Patch
CWE-434
Critical · CVSS 9.8
EPSS 32.9% (97th pct)2025-01-07
ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service
CVE-2025-21623
Public exploit
Patch
CWE-22
High · CVSS 7.5
EPSS 1.4% (81th pct)2025-01-07
ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete
CVE-2025-21622
Public exploit
Patch
CWE-22
High · CVSS 7.5
EPSS 1.3% (80th pct)2025-01-07
Critical vulnerability · 2024-12-06
CVE-2024-54135
Public exploit
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.3% (49th pct)2024-12-06
Critical vulnerability · 2024-12-06
CVE-2024-54136
Public exploit
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.3% (49th pct)2024-12-06

Common weakness types

The CWE weakness categories most often found in MacWarrior clipbucket-v5 CVEs. Follow any weakness for its full explanation.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVE
CWE-798Use of Hard-coded Credentials1 CVE
CWE-863Incorrect Authorization1 CVE

Disclosure activity by year

How many MacWarrior clipbucket-v5 CVEs were published each year.

2024

2

2025

17

2026

7

Other MacWarrior products

Browse vulnerabilities for other products by MacWarrior.

ClipBucket 5.5.01 CVEs ClipBucket v51 CVEs

All MacWarrior vulnerabilities

Frequently asked questions

Common questions about MacWarrior clipbucket-v5 vulnerabilities.

How many CVEs does MacWarrior clipbucket-v5 have?

MacWarrior clipbucket-v5 has 26 published CVE records since 2024.

How many MacWarrior clipbucket-v5 CVEs are in CISA KEV?

None of MacWarrior clipbucket-v5's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for MacWarrior clipbucket-v5 vulnerabilities?

Yes — 24 of MacWarrior clipbucket-v5's CVEs have a known public exploit.

Which versions of MacWarrior clipbucket-v5 are affected?

57 distinct MacWarrior clipbucket-v5 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in MacWarrior clipbucket-v5 CVEs?

MacWarrior clipbucket-v5's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-502 (Deserialization of Untrusted Data).

How many critical MacWarrior clipbucket-v5 vulnerabilities are there?

MacWarrior clipbucket-v5 has 6 critical and 8 high-severity CVEs.

What is the average severity of MacWarrior clipbucket-v5 CVEs?

The average CVSS base score across MacWarrior clipbucket-v5's scored CVEs is 7.2.

References

All MacWarrior vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track MacWarrior clipbucket-v5 vulnerabilities

Monitor new MacWarrior clipbucket-v5 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

a83b807e592f85d98f1f156bd3cbb1ffcc2302331 CVE

a9e0f2322fb37501dfd4f44079fc7826a132503a1 CVE

b3bf27e367f318c2afe9bd11368be9d00e2721481 CVE

b7289923177fe533ae908654ee3cd65b63ffb0081 CVE

d8c355ff7d9f20921636592403eaf36e49c399ba1 CVE

e81bac602c871bb1ad971884003a3a496a2ab50b1 CVE