The vulnerability identified as CVE-2024-54416 affects the Navdeep Wp Login with Ajax WordPress plugin (versions up to 0.6). It is a CSRF vulnerability that can be exploited to inject stored XSS payloads. The CVSS v3.1 base score is 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L), indicating that the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is needed. The vulnerability impacts confidentiality, integrity, and availability to a limited extent and can cause a change in security scope.

Successful exploitation of this vulnerability can allow an attacker to execute stored cross-site scripting attacks via CSRF, potentially leading to unauthorized actions performed with the privileges of a logged-in user. This can result in partial compromise of confidentiality, integrity, and availability of the affected system or user data. There are no known exploits in the wild at this time.

No official patch or remediation information is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory or plugin updates for current remediation guidance. Until a fix is released, users should consider disabling or removing the affected plugin version to mitigate risk.