TI-2025-05495 CVE-2025-6085 · GHSA-h3g2-4pxg-jwqwMake Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File UploadPriority HIGH 67The Make Connector plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'upload_media' function in all versions up to, and including, 1.5.10.CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01251 · Published 2025-09-04 · No fix listed CWE-434