Interact Quiz & Form Embed
Interact Quiz & Form Embed has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Interact Quiz & Form Embed has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Interact Quiz & Form Embed is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2023-5659Interact: Embed A Quiz On Your Site <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Read the full analysisVulnerability Records
Interact Quiz & Form Embed
Author
tryinteract
Use this plugin to generate a shortcode to embed your Interact quiz or form into your WordPress site. Promote your quiz within a Popup or an Announcement Bar. Check out some examples of how over 30,000 companies have utilized quizzes on their websites here IMPORTANT: An Interact account is required for this plugin to work as intended. Visit Interact, sign up, and create an Interact quiz or form before you embed it into your site. Installing this plugin without signing up on Interact will result in a broken embed on your site. Questions? Email help@tryinteract.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C