Skip to content
OpenAdvisories

Vendor

sourcez

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site Request Forgery to Arbitrary Event Deletion

    The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing nonce validation on the event deletion functionality. This makes it possible for unauthenti…