plugin

Copypress Rest Api Vulnerabilities

2 known security issues reported for the Copypress Rest Api WordPress plugin. Most recent disclosed Sep 29, 2025.

1 critical

Running Copypress Rest Api on your site? Check whether your installed version is affected.

Scan your site free

Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

critical

The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreap_handle_image() Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachments. As a result, una...

CVSS:
9.8
Affected:
1.1 – 1.2
Fix:
No patched version reported
Disclosed:
Sep 29, 2025

CVE-2025-8625 on NVD →

Copypress Rest API [copypress-rest-api] >= 1.1 - <= 1.2 (unfixed)

unknown
Affected:
1.1 – 1.2
Fix:
No patched version reported

CVE-2025-8625 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database