CVE-2024-30546: 
WordPress vulnerability analysis and mitigation

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Pixelite Login With Ajax plugin versions up to 4.1. The vulnerability was reported on January 21, 2024, and publicly disclosed on April 10, 2024. This security issue affects WordPress installations using the Login With Ajax plugin (Patchstack).

The vulnerability is classified as a Cross-Site Request Forgery (CSRF) issue, identified as CVE-2024-30546. It received a CVSS v3.1 Base Score of 4.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. The vulnerability is categorized under CWE-352 (Cross-Site Request Forgery) (NVD).

The CSRF vulnerability could allow malicious actors to force higher privileged users to execute unwanted actions under their current authentication. The severity is considered low, but it still presents a potential security risk to affected installations (Patchstack).

The vulnerability can be exploited by unauthenticated attackers, though it requires user interaction. The attack complexity is rated as low, indicating relatively straightforward exploitation methods (Patchstack).

The vulnerability has been fixed in version 4.2 of the Login With Ajax plugin. Users are advised to update to version 4.2 or later to remove the vulnerability. The security issue has a low severity impact and is considered unlikely to be exploited (Patchstack).