# cve.now: Cyberchimps

The newest entries naming Cyberchimps as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-15795](https://cve.now/CVE-2026-15795.md): Responsive Plus \<= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4)
- [CVE-2026-6703](https://cve.now/CVE-2026-6703.md): Responsive Blocks \<= 2.2.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions (CVSS 4.3)
- [CVE-2026-6675](https://cve.now/CVE-2026-6675.md): Responsive Blocks \<= 2.2.0 - Unauthenticated Open Email Relay via REST API 'email\_to' Parameter (CVSS 5.3)
- [CVE-2026-32543](https://cve.now/CVE-2026-32543.md): WordPress Responsive Blocks plugin \<= 2.2.0 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2025-69363](https://cve.now/CVE-2025-69363.md): WordPress Responsive Addons for Elementor plugin \<= 2.0.8 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-8215](https://cve.now/CVE-2025-8215.md): Responsive Addons for Elementor \<= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4)
- [CVE-2025-54050](https://cve.now/CVE-2025-54050.md): WordPress Responsive Addons for Elementor plugin \<= 1.7.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-53202](https://cve.now/CVE-2025-53202.md): WordPress Responsive Blocks plugin \<= 2.0.6 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-49856](https://cve.now/CVE-2025-49856.md): WordPress Responsive Plus plugin \<= 3.2.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 4.3)
- [CVE-2025-49881](https://cve.now/CVE-2025-49881.md): WordPress Responsive Blocks plugin \<= 2.0.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-48335](https://cve.now/CVE-2025-48335.md): WordPress Responsive Plus plugin \<= 3.2.0 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-47486](https://cve.now/CVE-2025-47486.md): WordPress Gutenberg & Elementor Templates Importer For Responsive plugin \<= 3.1.9 - Broken Access Control Vulnerability (CVSS 5.3)
- [CVE-2025-39578](https://cve.now/CVE-2025-39578.md): WordPress Responsive Blocks plugin \<= 2.0.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-2225](https://cve.now/CVE-2025-2225.md): Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates \<= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rael\_title\_tag' (CVSS 6.4)
- [CVE-2025-2228](https://cve.now/CVE-2025-2228.md): Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates \<= 1.6.8 - Authenticated (Contributor+) Sensitive Information Exposure (CVSS 5.7)
- [CVE-2024-13353](https://cve.now/CVE-2024-13353.md): Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates \<= 1.6.4 - Authenticated (Contributor+) Local File Inclusion (CVSS 8.8)
- [CVE-2024-13834](https://cve.now/CVE-2024-13834.md): Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme \<= 3.1.4 - Authenticated (Contributor+) Blind Server-Side Request Forgery via remote\_request (CVSS 5.4)
- [CVE-2025-22697](https://cve.now/CVE-2025-22697.md): WordPress Responsive Blocks plugin \<= 1.9.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-13732](https://cve.now/CVE-2024-13732.md): Responsive Blocks – WordPress Gutenberg Blocks \<= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via section\_tag Parameter (CVSS 6.4)
- [CVE-2024-13354](https://cve.now/CVE-2024-13354.md): Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates \<= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-12268](https://cve.now/CVE-2024-12268.md): Responsive Blocks – WordPress Gutenberg Blocks \<= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-52358](https://cve.now/CVE-2024-52358.md): WordPress Responsive Addons for Elementor plugin \<= 1.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-43335](https://cve.now/CVE-2024-43335.md): WordPress Responsive Blocks – WordPress Gutenberg Blocks plugin \<= 1.8.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-37949](https://cve.now/CVE-2024-37949.md): WordPress Responsive Mobile theme \<= 1.15.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-5222](https://cve.now/CVE-2024-5222.md): Responsive Addons – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme. \<= 3.0.5 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-35654](https://cve.now/CVE-2024-35654.md): WordPress Responsive theme \<= 5.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-2848](https://cve.now/CVE-2024-2848.md): Responsive \<= 5.0.2 - Missing Authorization to HTML Injection (CVSS 7.5)
- [CVE-2022-45375](https://cve.now/CVE-2022-45375.md): WordPress iFeature Slider plugin \<= 1.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (CVSS 5.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/cyberchimps
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.