This vulnerability involves an SSRF flaw in the FG Drupal to WordPress plugin by Kerfred, which enables an attacker with high privileges to cause the server to send crafted requests to internal or external systems. The affected versions are from initial release through 3.90.0. The CVSS vector indicates network attack vector, high attack complexity, high privileges required, no user interaction, scope changed, and low impact on confidentiality and integrity, with no impact on availability.

An attacker with high privileges on the affected system could exploit this SSRF vulnerability to make the server perform unintended requests, potentially accessing or interacting with internal resources or services. The impact on confidentiality and integrity is low, and there is no impact on availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict high-privilege access to the plugin and review server-side request handling configurations to limit SSRF risks.