Make Connector

Make Connector has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (33%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for Make Connector has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Ryan Kozak. Make Connector is installed on roughly 70,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Make Connector vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

Make, formerly Integromat Connector <= 1.5.1 - Missing Authorization to Arbitrary Options Update

Read the full analysis

Vulnerability Records

3 records


2025-09-03 21:08	Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload Make Connector <= 1.5.10	`CVE-2025-6085`	7.2 High	Ryan Kozak	Yes
2022-09-26 00:00	Make, formerly Integromat Connector <= 1.5.2 - Authenticated (Subscriber+) Information Disclosure Make Connector <= 1.5.2	`N/A`	6.5 Medium	Anonymous	Yes
2022-08-17 00:00	Make, formerly Integromat Connector <= 1.5.1 - Missing Authorization to Arbitrary Options Update Make Connector <= 1.5.1	`N/A`	8.8 High	Anonymous	Yes

Showing 1–3 of 3 reports

Latestv1.6.6

Make Connector

Author

Make

2.7(25)

54/100

Last Updated

2026-02-09 (7mo ago)

Active Installs

70,000+

Downloads

530,352

Requires WP

5.0+

Requires PHP

7.2+

Tested up to

WP 6.9.7

Created

2021-02-17 (6y ago)

Make is a visual platform that lets you design, build, and automate anything – from simple tasks to complex workflows – in minutes. With Make, you can send information between WordPress and thousands of apps to drive traffic and improve sales potential. It’s fast and easy to use, visually intuitive and requires zero coding expertise. Here are some of the ways to use WordPress with Make: Add new WordPress users to your CMR and marketing tools, like Salesforce, ActiveCampaign, or Mailchimp Create new WordPress posts from incoming webhook data, Google Forms responses, or FreeScout conversations Share your WordPress posts on Facebook, Pinterest, or other social media platforms Send a message about new WordPress posts to messaging apps, like Slack, Telegram, or Microsoft Teams Create database items from your WordPress posts in Notion, MySQL, or any other database app Or choose a template to help you get started. How to get started: Sign up for Make, and enjoy a free account forever. Or, choose a monthly or yearly plan with advanced features. Check Make’s documentation on how to connect WordPress. Install the plugin, and start building WordPress integrations on Make. Get help from Make’s Support team. Make’s Terms of use and Privacy policy.

View on WordPress.org