PT-2025-39945 · WordPress · Copypress Rest Api Plugin

Kenneth Dunn · Published 2025-09-30 · Updated 2025-10-05 · CVE-2025-8625

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Copypress Rest API plugin for WordPress versions 1.1 through 1.2

Description The Copypress Rest API plugin for WordPress is susceptible to Remote Code Execution through the copyreap handle image() function. The plugin utilizes a hard-coded JWT signing key when a secret is not defined and lacks restrictions on the types of files that can be fetched and saved as attachments. This allows unauthenticated attackers to forge a valid token, gain elevated privileges, and upload arbitrary files, such as PHP scripts, through the image handler, ultimately leading to remote code execution.

Recommendations Update Copypress Rest API plugin to a version newer than 1.2.

Fix

RCE

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2025-8625

Affected Products

Copypress Rest Api Plugin

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-8625 · Security Note
• https://t.me/CVEtracker/33690 · Telegram Post
• https://twitter.com/CVEnew/status/1972878688992518266 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/3045c9e5-4095-48e5-8d9d-16a091e69d54?source=cve · Note
• https://wordpress.org/plugins/copypress-rest-api/#developers · Note
• https://twitter.com/0dayPublishing/status/1972868704506462657 · Twitter Post
• https://twitter.com/Nxploited/status/1973845257902231852 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1973003675275567201 · Twitter Post
• https://twitter.com/cracbot/status/1974791723445277118 · Twitter Post
• https://twitter.com/Nxploited/status/1974934534442676688 · Twitter Post