The vulnerability CVE-2025-58675 is a CSRF issue in the tryinteract Interact: Embed A Quiz On Your Site plugin, affecting versions up to 3.1. It allows attackers to trick authenticated users into submitting unwanted requests, potentially altering data or state within the application. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or vendor advisory is currently available, and no exploits are known in the wild.

The impact is limited to integrity with no confidentiality or availability effects. An attacker could cause a user to perform unintended actions within the application context, potentially altering data or settings without the user's explicit consent. Because the attack requires user interaction and no privileges, the risk is moderate but not critical.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens on state-changing requests or restricting actions to POST methods with proper validation. Monitoring for updates from the vendor is recommended.