Critical Problems:
* The Plugin “Make Connector” has been removed from wordpress.org but is still installed on your site.
Plugin contains an unpatched security vulnerability.
3 Likes
+1
Our host issued an alert about a vulnerability in Make.com plugin in Wordpress. Do you have an ETA to fix it?
1 Like
It’s unbelieveable how unprofessional this is by Make to let their WordPress Plugin, which so many of us rely on, become outdated and have such large security holes that WordPress have even removed it from the WordPress Plugin store: Make Connector – WordPress plugin | WordPress.org English (UK)
It is now 6 days since it was removed from the WordPress Plugin store, and it has been vulnerable and flagged for much longer, and yet not even a reply from Make about this??
I really hope they get this fixed ASAP and learns from it, because it’s not the first time they have ignored it and let it become outdated.
2 Likes
I was astonished that I was the only one to post (or at least a quick search showed no other reports) about this problem. I removed the plugin that day. I am not inviting anyone into my site due to the sheer laziness of Make. They don’t have the market cornered for automation, so they really should be more attentive to actual problems, such as this, over worrying about this crediting system.
Hello everyone and thank you very much for raising this in the community.
The Make plugin for WordPress has been temporarily closed while a full review is in progress. We know this may disrupt your workflows, and we truly apologize for the impact.
Our development team is actively working on this, and we’ll keep you updated with any progress along the way until the plugin is available again.
As we are still in contact with Wordpress team on this, you can install the plugin from this link manually until the plugin comes active again. You can follow the steps how to install the zip file here.
Once again, we apologize for any disruptions and frustration this is causing.
Thank you very much for your patience and understanding. 
What are you trying to achieve?
Hi, where i find make connector plugin for wordpress? Here Make Connector – Plugin WordPress | WordPress.org Venezuela is not available.
thx
What are you trying to achieve?
Hi, where i find make connector plugin for wordpress? Here Make Connector – Plugin WordPress | WordPress.org Venezuela is not available.
thx
Am I reading this correct? Due to a critical security issue where your plugin allows uploads to wordpress sites, wordpress has removed the plugin for safety YET you are telling people to install it anyway WHILE you are active working on it? I would think as a company you should discourage people from using the plugin UNTIL you get the vulnerability fixed. That is a lot of sarcasm there, you absolutely should NOT be giving links to a security hole.
Hi @jackmeat, thanks for raising your concerns.
To give you more context, WordPress flagged the issue based on this report from Wordfence.
The reported vulnerability made it possible for a malicious actor with Administrator-level access (or higher) to upload arbitrary files to the server, which could potentially allow remote code execution. It’s important to stress that this requires someone to have admin rights on your site already.
Our development team has already addressed this issue and implemented additional security improvements. The update is now undergoing internal testing to ensure it’s fully secure and backward compatible. Once verified, we’ll submit it to WordPress for review, and if approved, the plugin will be relisted.
In the meantime, the plugin remains available in the provided ZIP version for those who choose to continue using it. We’ll notify you as soon as the official update is live in the WordPress directory.
I downloaded the zip file but it failed:
Installing plugin from uploaded file: integromat-connector.1.5.zip
Unpacking the package…
Installing the plugin…
The package could not be installed. No valid plugins were found.
Plugin installation failed.
I personally don’t leave my safe wide open in my house, even though I am POSITIVE all my doors and windows are locked. I’ll pass on using this plugin until it is properly fixed and approved. No reason to use anything that contains a potential vulnerability. I had already read all the links wordfence provided that day and removed the plugin. Let me know, please, when it has been patched up and approved again.
Today, my wordpress, with this plugin turn on, all the custom post page cannot be edit, instead throw me an error.
As soon as i deactivate this plugin, the custom post page can be edited.
I was about to get my developer to install the Wordpress plugin and I ran into this error message. Have we seen this before?? How long does this review usually take? Make Connector – WordPress plugin | WordPress.org English (UK)
Same here, was also confused why it was removed.
But you can go to the SVN repository and download the latest version:
What are you trying to achieve?
Hi.
super good video 
I was looking for the plugin “make connector,” it was closed and removed on Sep 3. How do I bypass make.com with wordpress. I’m in the process of making my YouTube videos into blog posts on my wordpress site.
Hi @Michael_Balkemose and welcome to the Make Community!
I think the only way would be to use the WordPress API using the HTTP module, until the Wordpress module gets fixed.
L
Hi @Yamil_Francisco, I’m really sorry to hear that you are running into this issue with the manual install. I’d recommend opening a support ticket with our Customer Care team, as they’ll be able to walk you through the next steps and help get this sorted. Thanks a lot for your collaboration.
Also, thanks to everyone else for keeping the discussion going and sharing new reports.
For anyone just joining the thread, here’s a quick summary of the situation:
- The plugin is temporarily disabled in the WordPress directory.
- A new, updated version has already been developed by our dev team, and it is now in the final stages of internal testing.
- Once our testing is complete, we’ll submit the update to the WordPress team for review and share an update here as soon as it’s live again.
At this moment, we don’t have a specific ETA to share, but we will make sure to keep you updated about any new developments.
Apologies once more for any disruptions this is causing, and thank you all for your patience and understanding.
2 Likes
Apparently its disabled by WordPress due to some security issue I think.
Were you able to find a workaround for this?
Does anyone know about this situation? I went to install it in my new website and it says that this has been closed as of September 3rd 2025. It is not available anymore.
Hi everyone, thanks for continuing to share updates here. We really appreciate it.
Just to reiterate what I shared earlier for anyone joining now:
At this moment, there are no new updates we could share. However, we’ll make sure to let you know as soon as we get any information about the progress of this.
Thank you very much for your patience and understanding