CVE-2025-6781

Name of the Vulnerable Software and Affected Versions Copymatic – AI Content Writer & Generator plugin for WordPress versions up to and including 2.1

Description The Copymatic – AI Content Writer & Generator plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the copymatic-menu page. This allows unauthenticated attackers to update the copymatic apikey option via a forged request if they can trick a site administrator into performing an action, such as clicking a link.

Recommendations Update Copymatic – AI Content Writer & Generator plugin for WordPress to a version later than 2.1.