A vulnerability classified as critical has been found in awsmin Embed Any Document Plugin up to 2.7.5 on WordPress. This affects the function
embeddoc
of the component Shortcode Handler. The manipulation leads to server-side request forgery.
This vulnerability is uniquely identified as CVE-2025-1043. It is possible to initiate the attack remotely. There is no exploit available.