CyberSecBulletin

Copypressdev vulnerabilities

We track 1 vulnerability in Copypressdev products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2025.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Copypressdev vulnerabilities

  • 9.8 Critical severity

    Copypress Rest API: Use of Hard-coded Cryptographic Key

    CVE-2025-8625Copypressdev

    The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreap_handle_image() Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file typ