CVE-2024-54355 is a CSRF vulnerability affecting the WP Mailster plugin by brandtoss, specifically versions up to 1.8.17.0. This vulnerability enables attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, but requiring user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability could allow an attacker to cause limited unauthorized actions by exploiting the CSRF flaw, potentially altering plugin settings or behavior without the user's consent. There is no indication of confidentiality or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying standard CSRF mitigations such as disabling or restricting the plugin, or limiting user privileges to reduce risk. Monitor vendor channels for updates.