CVE-2026-15821

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.10.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

MSC-2023-15821

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

CVE-2020-15821

In YouTrack prior to 2020.2.6881, a user lacking the necessary permissions could create an article draft. This vulnerability (CVE-2020-15821) affects YouTrack versions up to and including 2020.2.6880, with the remediation implemented in 2020.2.6881 as noted in JetBrains’ Q2 2020 security bulletin...

CVE-2019-15821

The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data...

CVE-2019-15821

The CVE-2019-15821 entry concerns the WordPress Bold Page Builder plugin (versions before 2.3.2). Affected: Bold Page Builder plugin for WordPress. Vulnerability: lack of access control allows an unauthenticated user to modify plugin settings and import data, enabling unauthorized configuration c...

CVE-2019-15821

The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data...

CVE-2017-15821

CVE-2017-15821 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The issue is in the function wma_p2p_noa_event_handler(), where there is no bound check on a value from firmware, potentially causing a buffer overwrite. This description explicitly names t...