Unauthorized Access in Responsive Blocks Plugin for WordPress

CVE-2026-6703

What is CVE-2026-6703?

The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress contains a vulnerability that allows authenticated users with contributor-level access and above to perform unauthorized actions. The flaw is due to insufficient verification of user permissions, enabling attackers to alter critical global settings of the plugin. This includes modifying custom CSS, disabling essential blocks, and changing layout defaults like content width and container padding, leading to significant manipulation of website appearance and functionality.

References