A vulnerability has been found in Advanced iFrame Plugin up to 2025.5 on WordPress and classified as problematic. This vulnerability affects the function
advanced_iframe
of the component Shortcode Handler. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2025-6987. The attack can be initiated remotely. There is no exploit available.