WordPress Wp Login with Ajax plugin <= 0.6 - CSRF to Stored Cross-Site Scripting vulnerability

CVE-2024-54416

What is CVE-2024-54416?

A vulnerability has been identified in the Wp Login with Ajax plugin developed by Navdeep Kumar, which presents a Cross-Site Request Forgery (CSRF) flaw that can lead to Stored Cross-Site Scripting (XSS) attacks. The issue is present in all versions up to 0.6, enabling attackers to potentially execute malicious scripts in the context of an authenticated user's session. This vulnerability poses a significant security risk, as it may lead to unauthorized actions being executed on behalf of legitimate users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References