CVE-2026-15821

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.10.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2020-15821

In YouTrack prior to 2020.2.6881, a user lacking the necessary permissions could create an article draft. This vulnerability (CVE-2020-15821) affects YouTrack versions up to and including 2020.2.6880, with the remediation implemented in 2020.2.6881 as noted in JetBrains’ Q2 2020 security bulletin...

CVE-2019-15821

The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data...

CVE-2019-15821

The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data...

CVE-2019-15821

The CVE-2019-15821 entry concerns the WordPress Bold Page Builder plugin (versions before 2.3.2). Affected: Bold Page Builder plugin for WordPress. Vulnerability: lack of access control allows an unauthenticated user to modify plugin settings and import data, enabling unauthorized configuration c...

CVE-2017-15821

CVE-2017-15821 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The issue is in the function wma_p2p_noa_event_handler(), where there is no bound check on a value from firmware, potentially causing a buffer overwrite. This description explicitly names t...