WordPress plugin
Make Connector security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium1
- Low0
All Make Connector vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Administrator+) Arbitrary File Upload ≤1.5.10Update to 1.6.0 | CVE-2025-6085 | |
| Medium6.5 | Authenticated (Subscriber+) Information Disclosure ≤1.5.2Update to 1.5.3 | — | |
| High8.8 | Missing Authorization to Arbitrary Options Update ≤1.5.1Update to 1.5.2 | — |
- High7.2Authenticated (Administrator+) Arbitrary File Upload
≤1.5.10Update to 1.6.0
- Medium6.5Authenticated (Subscriber+) Information Disclosure
≤1.5.2Update to 1.5.3
- High8.8Missing Authorization to Arbitrary Options Update
≤1.5.1Update to 1.5.2
Make Connector: common questions
Does Make Connector have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Make Connector: 2 high, 1 medium. None are known to affect version null.
How do I check which version of Make Connector I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Make Connector vulnerability?
CVE-2025-6085, published Sep 3, 2025: Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload. Severity: High (CVSS 7.2).
Is any Make Connector vulnerability listed in CISA KEV?
No. None of the known Make Connector vulnerabilities is currently listed in the CISA KEV catalog.