EUVD-2026-88971

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...

CVE-2026-102570

ClipBucket versions v5 through 5.5.3-#197 are vulnerable to a time-based blind SQL injection within the language update function. The flaw exists because the language_id parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. This allows an authenticated administrator po...

CVE-2026-102570 ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...

WordPress download manager plugin elevation of privilege vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WordPress Download Manager is one of the file download management plugin. A security vulnerability exists in the...

CVE-2014-9260: Undefined Security Weakness

The basicsettings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every WordPress option...