WordPress · Seatt: Simple Event Attendance · CVE-2026-1983
**Name of the Vulnerable Software and Affected Versions**
SEATT: Simple Event Attendance plugin for WordPress versions prior to 1.5.1
**Description**
The SEATT: Simple Event Attendance plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF). This is caused by a lack of nonce validation when deleting events. An unauthenticated attacker could potentially delete events by tricking an administrator into performing an action, such as clicking a malicious link. The vulnerable functionality involves event deletion.
**Recommendations**
Update the SEATT: Simple Event Attendance plugin to version 1.5.1 or later.