CVE-2026-1983

Name of the Vulnerable Software and Affected Versions SEATT: Simple Event Attendance plugin for WordPress versions prior to 1.5.1

Description The SEATT: Simple Event Attendance plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF). This is caused by a lack of nonce validation when deleting events. An unauthenticated attacker could potentially delete events by tricking an administrator into performing an action, such as clicking a malicious link. The vulnerable functionality involves event deletion.

Recommendations Update the SEATT: Simple Event Attendance plugin to version 1.5.1 or later.