Responsive Blocks CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Responsive Blocks CVE published 2026-10-14

CVE-2026-97315

CVE-2026-97315 is a MEDIUM-severity vulnerability in the Responsive Blocks WordPress plugin before version 2.3.0. The plugin does not properly sanitize or escape user-submitted values from its Form block before including them in the HTML of notification emails sent to site owners. This allows unauthenticated attackers to inject arbitrary HTML, such as phishing links, into these emails.