Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing nonce validation on the event deletion functionality. This makes it possible for unauthenticated attackers to delete arbitrary events via a forged request granted they can trick an administrator into performing an action such as clicking on a link.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-1983 The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing … https://www.cve.org/CVERecord?id=CVE-2026-1983
Post summary
The text discloses a CSRF vulnerability in the SEATT WordPress plugin up to version 1.5.0, with no evidence of exploitation or patch information.
⚡ New CVE Alert: CVE-2026-1983 📊 Severity: 4.3 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1983 #CVE-2026-1983 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/GDJliRDPtE
Post summary
The tweet simply announces a new WordPress CVE (CVE‑2026‑1983) with a low severity rating and links to the NVD entry, offering no exploit details, patch information, or evidence of active exploitation.
CVE-2026-1983 Cross-Site Request Forgery in SEATT WordPress Plugin Enables Event... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1983 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
A new CVE (CVE-2026-1983) is disclosed, revealing a CSRF flaw in the SEATT WordPress plugin that could allow unauthorized event actions, with no proof‑of‑concept, active exploitation, or patch information provided.