Interact Quiz Embed Vulnerabilities

The Interact: Embed A Quiz On Your Site plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request...

CVSS:

4.3

Affected:

up to 3.1

Fixed in:

3.2

Disclosed:

Sep 22, 2025

CVE-2025-58675 on NVD →

[en] The Interact: Embed A Quiz On Your Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'interact-quiz' shortcode in all versions up to, and including, 3.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authent...

Affected:

up to 3.1

Fixed in:

3.1

Disclosed:

Nov 7, 2023

CVE-2023-5659 on NVD →

The Interact: Embed A Quiz On Your Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'interact-quiz' shortcode in all versions up to, and including, 3.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVSS:

6.4

Affected:

up to 3.0.7

Fixed in:

3.1

Disclosed:

Nov 3, 2023

CVE-2023-5659 on NVD →

Affected:

up to 3.1

Fix:

No patched version reported

CVE-2025-58675 on NVD →