A vulnerability was found in Spotify Embed Creator Plugin up to 1.0.5 on WordPress. It has been classified as problematic. Impacted is the function
spotify of the component Shortcode Handler. This manipulation causes cross site scripting.
This vulnerability appears as CVE-2025-9879. The attack may be initiated remotely. There is no available exploit.
