TI-2025-07896 CVE-2025-8625 · GHSA-v536-8hrh-rxx4
Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation…
Priority MEDIUM 50
The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreap_handle_image() Function in versions 1.1 to 1.2.