A vulnerability classified as problematic has been found in Embed Any Document Plugin up to 2.7.10 on WordPress. Impacted is the function
sanitize_pdf_src. This manipulation causes cross site scripting.
The identification of this vulnerability is CVE-2025-12885. It is possible to initiate the attack remotely. There is no exploit available.
