This vulnerability (CVE-2024-32788) in the FG Joomla to WordPress plugin allows sensitive information to be written into log files (CWE-532). The issue affects all versions up to 4.20.2. The CVSS 3.1 base score is 5.3, with an attack vector of network, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or vendor advisory is currently available, and no exploits have been observed in the wild.

The vulnerability could lead to unauthorized disclosure of sensitive information through log files, potentially aiding attackers in reconnaissance or further attacks. The impact is limited to confidentiality with no integrity or availability effects reported. Since no exploits are known in the wild, the immediate risk is moderate.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and restrict access to log files to prevent unauthorized disclosure of sensitive information. Monitor official channels for updates from the vendor regarding patches or mitigations.