Fg Drupal To Wp Vulnerabilities

The FG Drupal to WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.90.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application which...

CVSS:

5.5

Affected:

up to 3.90.0

Fixed in:

3.90.1

Disclosed:

Jul 16, 2025

CVE-2025-48294 on NVD →

The FG Drupal to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.70.3 via log files. This makes it possible for unauthenticated attackers to extract sensitive data from log files.

CVSS:

5.3

Affected:

up to 3.70.3

Fixed in:

3.71.0

Disclosed:

Apr 5, 2024

CVE-2024-31247 on NVD →

The FG Drupal to WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.67.0. This is due to missing or incorrect nonce validation on the ajax_importer() function. This makes it possible for unauthenticated attackers to delete logs via a forged request granted the...

CVSS:

4.3

Affected:

up to 3.67.0

Fixed in:

3.68.0

Disclosed:

Feb 2, 2024

CVE-2024-24837 on NVD →