WordPress Plugin Vulnerabilities

Responsive Blocks – Page Builder for Blocks & Patterns < 2.2.1 - Missing Authorization

Description

The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Affects Plugins

Plugin icon
responsive-block-editor-addons
Fixed in 2.2.1

References

CVE
CVE-2026-32543
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/9d720d66-9a2c-4bb7-9be0-341eb0e24193

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Silver Asu
Verified
No
WPVDB ID
a3349fa8-6b9c-4c04-a8d8-60b1a80b8a3b

Timeline

Publicly Published
2026-03-11 (about 2 months ago)
Added
2026-03-19 (about 2 months ago)
Last Updated
2026-03-19 (about 2 months ago)

Other

Published
Title
Published
2024-07-23
Title
WP Easy Pay (Free) < 4.2.4 - Missing Authorization to Unauthenticated Service Disconnection
Published
2025-01-30
Title
zStore Manager Basic <= 3.311 - Missing Authorization to Authenticated (Subscriber+) Cache Clearing
Published
2026-01-14
Title
Alma < 5.16.2 - Missing Authorization
Published
2026-01-24
Title
WP Go Maps (formerly WP Google Maps) < 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification
Published
2026-04-23
Title
WP Books Gallery < 4.8.1 - Missing Authorization to Unauthenticated Settings Update via 'permalink_structure' Parameter