WP-Safety

Make Connector Security & Risk Analysis

wordpress.org/plugins/integromat-connector

Make Connector. Make lets you design, build, and automate by connecting with WordPress in just a few clicks.

80K active installs v1.6.6 PHP 7.2+ WP 5.0+ Updated Feb 9, 2026
apiintegromatmakerestrest-api
94
A · Safe
CVEs total3
Unpatched0
Last CVESep 3, 2025
Download
Safety Verdict

Is Make Connector Safe to Use in 2026?

Generally Safe

Score 94/100

Make Connector has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

3 known CVEsLast CVE: Sep 3, 2025Updated 3mo ago
Risk Assessment

The "integromat-connector" plugin v1.6.6 exhibits a mixed security posture. On the positive side, the code demonstrates good practices by using prepared statements for all SQL queries and a very high percentage of properly escaped output. The absence of bundled libraries and external HTTP requests is also a strength, reducing the potential attack surface from those vectors. The plugin also shows a good number of nonce and capability checks within its code.

Key Concerns

  • Unprotected AJAX handlers
  • High severity historical vulnerabilities
  • Medium severity historical vulnerability
Vulnerabilities
3 published

Make Connector Security Vulnerabilities

CVEs by Year

2 CVEs in 2022
2022
1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

High
2
Medium
1

3 total CVEs

CVE-2025-6085high · 7.2Unrestricted Upload of File with Dangerous Type

Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload

Sep 3, 2025 Patched in 1.6.0 (16d)
WF-8f7b0a1c-16d7-45db-b419-569ed5c4a5e4-integromat-connectormedium · 6.5Exposure of Sensitive Information to an Unauthorized Actor

Make, formerly Integromat Connector <= 1.5.2 - Authenticated (Subscriber+) Information Disclosure

Sep 26, 2022 Patched in 1.5.3 (484d)
WF-12b4d9e6-761f-4857-a701-7d22d4ee0288-integromat-connectorhigh · 8.8Missing Authorization

Make, formerly Integromat Connector <= 1.5.1 - Missing Authorization to Arbitrary Options Update

Aug 17, 2022 Patched in 1.5.2 (524d)
Version History

Make Connector Release Timeline

v1.6.6Current
v1.6.5
v1.6.4
v1.6.3
v1.6.2
v1.6.1
v1.6.0
v1.5.101 CVE
CVE-2025-6085
v1.5.91 CVE
CVE-2025-6085
v1.5.81 CVE
CVE-2025-6085
v1.5.71 CVE
CVE-2025-6085
v1.5.61 CVE
CVE-2025-6085
v1.5.51 CVE
CVE-2025-6085
v1.5.41 CVE
CVE-2025-6085
v1.5.31 CVE
CVE-2025-6085
v1.5.22 CVEs
WF-8f7b0a1c-16d7-45db-b419-569ed5c4a5e4-integromat-connector CVE-2025-6085
v1.5.13 CVEs
WF-12b4d9e6-761f-4857-a701-7d22d4ee0288-integromat-connector WF-8f7b0a1c-16d7-45db-b419-569ed5c4a5e4-integromat-connector CVE-2025-6085
v1.53 CVEs
WF-12b4d9e6-761f-4857-a701-7d22d4ee0288-integromat-connector WF-8f7b0a1c-16d7-45db-b419-569ed5c4a5e4-integromat-connector CVE-2025-6085
Code Analysis
Analyzed Mar 16, 2026

Make Connector Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
4
121 escaped
Nonce Checks
7
Capability Checks
13
File Operations
7
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

97% escaped125 total outputs
Attack Surface
3 unprotected

Make Connector Attack Surface

Entry Points3
Unprotected3

AJAX Handlers 3

authwp_ajax_iwc_regenerate_api_keyindex.php:80
authwp_ajax_iwc_reveal_api_keyindex.php:116
authwp_ajax_iwc_purge_logsindex.php:153
WordPress Hooks 10
filterrest_authentication_errorsapi\authentication.php:3
actionrest_api_initapi\response.php:3
actionadmin_initclass\class-api-permissions.php:40
actionadmin_enqueue_scriptsindex.php:47
actionadmin_initsettings\class-controller.php:12
actioninitsettings\class-controller.php:57
filterpre_update_option_integromat_api_options_taxonomysettings\class-controller.php:66
filterregister_taxonomy_argssettings\class-controller.php:81
actionadmin_menusettings\events.php:3
actionadmin_menusettings\render.php:3
Maintenance & Trust

Make Connector Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 9, 2026
PHP min version7.2
Downloads484K

Community Trust

Rating54/100
Number of ratings25
Active installs80K
Alternatives

Make Connector Alternatives

Synapse – Data Bridge for Automation

Synapse – Data Bridge for Automation

synapse

A
100

The data bridge for WordPress. A powerful REST API to monitor sites and automate workflows with n8n, Zapier, Make, and your own scripts.

20 No CVEs
WooCommerce Legacy REST API

WooCommerce Legacy REST API

woocommerce-legacy-rest-api

A
92

The WooCommerce Legacy REST API, which is now part of WooCommerce itself but will be removed in WooCommerce 9.0.

400K No CVEs
Disable REST API

Disable REST API

disable-json-api

A
85

Disable the use of the REST API on your website to site users. Now with User Role support!

90K No CVEs
JWT Authentication for WP REST API

JWT Authentication for WP REST API

jwt-authentication-for-wp-rest-api

A
100

Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.

60K No CVEs
Disable WP REST API

Disable WP REST API

disable-wp-rest-api

A
100

Disables the WP REST API for visitors not logged into WordPress.

30K No CVEs
Developer Profile

Make Connector Developer Profile

Make

2 plugins · 81K total installs

72
trust score
Avg Security Score
90/100
Avg Patch Time
341 days
View full developer profile
Detection Fingerprints

How We Detect Make Connector

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/integromat-connector/assets/iwc.css/wp-content/plugins/integromat-connector/assets/iwc.js
Script Paths
/wp-content/plugins/integromat-connector/assets/iwc.js
Version Parameters
integromat-connector/assets/iwc.css?ver=integromat-connector/assets/iwc.js?ver=

HTML / DOM Fingerprints

JS Globals
iwc_ajax
FAQ

Frequently Asked Questions about Make Connector