FG Joomla to WordPress
FG Joomla to WordPress has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 7.4 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Insertion Of Sensitive Information Into Log File.
Every one of the 3 issues recorded for FG Joomla to WordPress has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. FG Joomla to WordPress is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
FG Joomla to WordPress < 3.31.0 - Authenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records

FG Joomla to WordPress
Author
Kerfred
This plugin migrates sections, categories, posts, images, medias and tags from Joomla to WordPress. It has been tested with Joomla versions 1.5 to 6.0 and the latest version of WordPress on huge databases. It is compatible with multisite installations. Major features include: migrates Joomla sections as categories migrates categories as sub-categories migrates Joomla posts (published, unpublished and archived) migrates Joomla web links uploads all the posts media in WP uploads directories (as an option) uploads external media (as an option) modifies the post content to keep the media links resizes images according to the sizes defined in WP defines the featured image to be the first post image keeps the alt image attribute keeps the image caption modifies the internal links migrates meta keywords as tags migrates page breaks can import Joomla articles as posts or pages No need to subscribe to an external web site. Premium version The Premium version includes these extra features: migrates authors and other users with their passwords migrates the navigation menus SEO: migrates the meta description and the meta keywords SEO: keeps the Joomla articles IDs or redirects Joomla URLs to the new WordPress URLs compatible with Joomla 1.0 and Mambo 4.5 and 4.6 (process {mosimages} and {mospagebreak}) migrates Joomla 1.0 static articles as pages migrates Joomla 2.5+ featured images migrates Joomla 2.5+ post links migrates Joomla 3.1+ tags migrates Joomla 3.7+ custom fields migrates Mambo data migrates Elxis data (Joomla 1.0 fork) ability to run the import automatically from the cron The Premium version can be purchased on: https://www.fredericgilles.net/fg-joomla-to-wordpress/ Add-ons The Premium version allows the use of add-ons that enhance functionality: K2 EasyBlog Flexicontent Zoo Kunena forum sh404sef JoomSEF OpenSEF WP-PostViews (keep Joomla hits) JComments JomComment Komento JDownloads Joomlatags Attachments Rokbox RokGallery JoomGallery PhocaDownload PhocaGallery Joom!Fish translations to WPML JEvents events Contact Manager Docman Virtuemart JReviews Mosets Tree User Groups WPML Simple Image Gallery & Simple Image Gallery Pro RSGallery Community Builder RSBlog AllVideos HikaShop Acymailing These modules can be purchased on: https://www.fredericgilles.net/fg-joomla-to-wordpress/add-ons/ Demo Translations English (default) Esperanto (eo) French (fr_FR) Spanish (es_ES) Italian (it_IT) German (de_DE) Polish (pl_PL) Bulgarian (bg_BG) Brazilian (pt_BR) Greek (el_EL) other can be translated
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C