CVE-2025-58675 describes a CSRF vulnerability in the tryinteract Interact: Embed A Quiz On Your Site plugin, affecting versions up to 3.1. The vulnerability allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited integrity impact. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity but not confidentiality or availability.

The vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, potentially modifying data or settings within the plugin context. The impact is limited to integrity with no confidentiality or availability impact reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted users. Monitor vendor channels for updates and apply patches promptly once available.