CVE-2025-12885 | Embed Any Document Plugin up to 2.7.10 on WordPress sanitize_pdf_src cross site scripting

A vulnerability classified as problematic has been found in Embed Any Document Plugin up to 2.7.10 on WordPress. Impacted is the function sanitize_pdf_src. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2025-12885. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More