High · 7.1 CVE-2024-54432 EUVD-2024-52552GHSA-5f3c-j6m9-3fqv

WordPress WP Flipkart Importer plugin <= 1.4 - CSRF to Stored XSS vulnerability

Published Dec 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Shambhu Patnaik Product: WP Flipkart Importer

Description

Cross-Site Request Forgery (CSRF) vulnerability in Shambhu Patnaik WP Flipkart Importer wp-flipkart-importer allows Stored XSS.This issue affects WP Flipkart Importer: from n/a through <= 1.4.

Affected products

Vendor	Product	Affected	Fixed
Shambhu Patnaik	WP Flipkart Importer	≤ 1.4	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-flipkart-importer/vulnerability/wordpress-wp-flipkart-importer-plugin-1-4-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry