Arbitrary File Upload Vulnerability in ClipBucket 5.5.0 by MacWarrior

CVE-2025-55912

What is CVE-2025-55912?

An authentication bypass vulnerability in ClipBucket 5.5.0 and earlier versions allows an unauthenticated attacker to exploit the plupload endpoint within photo_uploader.php. This oversight in access control enables the upload of arbitrary files without proper verification. Organizations using these versions are urged to review their security measures, as this vulnerability could lead to further exploitation, including remote code execution if malicious files are executed.

References