Plugin icon

Responsive Blocks – Page Builder for Blocks & Patterns

responsive-block-editor-addons

Vulnerabilities:

10

Last Updated:

June 9, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-04-20
Title
Responsive Blocks < 2.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions
Fixed in
Fixed in 2.2.2
CVSS
2.7 (low)
Published
2026-04-20
Title
Responsive Blocks < 2.2.1 - Unauthenticated Open Email Relay via REST API 'email_to' Parameter
Fixed in
Fixed in 2.2.1
CVSS
5.3 (medium)
Published
2026-03-11
Title
Responsive Blocks – Page Builder for Blocks & Patterns < 2.2.1 - Missing Authorization
Fixed in
Fixed in 2.2.1
CVSS
5.3 (medium)
Published
2025-06-27
Title
Responsive Blocks < 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.7
CVSS
6.4 (medium)
Published
2025-06-12
Title
Responsive Blocks < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.6
CVSS
6.4 (medium)
Published
2025-04-16
Title
Responsive Blocks < 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.3
CVSS
6.4 (medium)
Published
2025-01-31
Title
Responsive Blocks < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.0
CVSS
6.4 (medium)
Published
2025-01-29
Title
Responsive Blocks – WordPress Gutenberg Blocks < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via section_tag Parameter
Fixed in
Fixed in 2.0.0
CVSS
6.4 (medium)
Published
2024-12-23
Title
Responsive Blocks – WordPress Gutenberg Blocks < 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.9.8
CVSS
6.4 (medium)
Published
2024-08-16
Title
Responsive Blocks – WordPress Gutenberg Blocks < 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.9
CVSS
6.4 (medium)