A vulnerability, which was classified as problematic, has been found in Thai Lottery Widget Plugin up to 2.5 on WordPress. The affected element is an unknown function. Performing manipulation of the argument width/height results in cross site scripting.
This vulnerability is identified as CVE-2025-13678. The attack can be initiated remotely. There is not any exploit available.