Read the docs

Celonis

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Celonis records in CISA KEV

No Celonis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Make Connector 1 record HIGH

Records

1 record in Make Connector · all components

TI-2025-05495 CVE-2025-6085 · GHSA-h3g2-4pxg-jwqw

Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload

Priority HIGH 67

The Make Connector plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'upload_media' function in all versions up to, and including, 1.5.10.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01251 Published 2025-09-04 No fix listed CWE-434
Open these records in search →