MakeStories (for Google Web Stories)

MakeStories (for Google Web Stories) has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (25%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, one record each. MakeStories (for Google Web Stories) is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all MakeStories (for Google Web Stories) vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-57984

MakeStories (for Google Web Stories) <= 3.0.4 - Authenticated (Author+) Server-Side Request Forgery

Read the full analysis

Vulnerability Records

4 records


2025-09-22 00:00	MakeStories (for Google Web Stories) <= 3.0.4 - Authenticated (Author+) Server-Side Request Forgery MakeStories (for Google Web Stories) <= 3.0.4	`CVE-2025-57984`	6.4 Medium	Nabil Irawan	No
2024-07-11 00:00	MakeStories (for Google Web Stories) <= 3.0.3 - Authenticated (Subscriber+) Arbitrary File Download and Server-Side Request Forgery MakeStories (for Google Web Stories) <= 3.0.3	`CVE-2024-38746`	4.3 Medium	Majed Refaea	Yes
2023-08-28 00:00	MakeStories (for Google Web Stories) <= 3.0.2 - Cross-Site Request Forgery via 'ms_set_options' MakeStories (for Google Web Stories) <= 3.0.2	`CVE-2023-27448`	4.3 Medium	Rio Darmawan	Yes
2022-07-06 00:00	MakeStories (for Web Stories) <= 2.6.4 - Cross-Ste Scripting MakeStories (for Google Web Stories) <= 2.6.4	`N/A`	6.1 Medium	Anonymous	Yes

Showing 1–4 of 4 reports

Latestv3.0.5

MakeStories (for Google Web Stories)

Author

Pratik Ghela

4.3(28)

86/100

Last Updated

2026-07-08 (2mo ago)

Active Installs

600+

Downloads

99,818

Requires WP

4.0+

Requires PHP

5.6+

Tested up to

WP 6.9.7

Created

2018-11-30 (8y ago)

MakeStories is a visual drag-drop based editor to create AMP-Stories. This plugin helps you publish your Google Web Stories directly to your WordPress site with one click from your dashboard. For detailed instructions on Installation and Setup read this article

View on WordPress.org