Interact: Embed A Quiz On Your Site

Interact: Embed A Quiz On Your Site has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Interact: Embed A Quiz On Your Site has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Interact: Embed A Quiz On Your Site is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Interact: Embed A Quiz On Your Site vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-5659

Interact: Embed A Quiz On Your Site <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

2 records
Interact: Embed A Quiz On Your Site banner
Latestv3.2

Interact: Embed A Quiz On Your Site

tryinteract

Author

tryinteract

4.6(11)
92/100
Last Updated
2025-09-30 (1y ago)
Active Installs
3,000+
Downloads
73,498
Requires WP
3.0.1+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2014-08-15 (12y ago)

Use this plugin to generate a shortcode to embed your Interact Quiz, Poll, or Giveaway into your WordPress site. Promote your quiz within a Popup or an Announcement Bar. Check out some examples of how over 30,000 companies have utilized quizzes on their websites here IMPORTANT: An Interact account is required for this plugin to work as intended. Visit Interact, sign up, and create an Interact Quiz, Poll, or Giveaway before you embed it into your site. Installing this plugin without signing up on Interact will result in a broken quiz experience on your site. Questions? Email help@tryinteract.com

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C