SEATT Simple Event Attendance WordPress Plugin Cross-Site Request Forgery Vulnerability
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the SEATT: Simple Event Attendance plugin for WordPress, affecting all versions through 1.5.0. The vulnerability arises from a lack of nonce validation in the event deletion process, allowing unauthenticated attackers to delete any event by tricking an administrator into clicking a link.
Impact
Exploitation of this vulnerability allows for arbitrary event deletion by an administrator.
Added: Feb 14, 2026, 5:45 AM
Updated: Feb 14, 2026, 5:45 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.9remediation
0.0relevance
2.8threat
3.2urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.